CVEs published February 10, 2020
56 CVEs were published on February 10, 2020: 1 critical, 1 high.
- Published
- 56
- Critical
- 1
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- PHP Group PHP
- 2
- Xiaomi Browser
- 2
- com.fasterxml.jackson.core:jackson-databind
- 1
- HP Systems Insight Manager
- 1
- InfoSphere Guardium
- 1
- NETGEAR AC1200
- 1
- Red Hat keycloak · org.keycloak:keycloak-core
- 1
- Samsung Knox
- 1
- sockjs
- 1
- WP Cleanfix Plugin authors WP Cleanfix Plugin
- 1
Critical 1
High 1
Medium, low and unrated 54
- CVE-2016-5710NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.
- CVE-2019-14514An issue was discovered in Microvirt MEmu all versions prior to 7.0.2.
- CVE-2020-8596participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vul
- CVE-2020-7217An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service
- CVE-2017-18642Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse e
- CVE-2019-19195The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict lin
- CVE-2019-19193The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5
- CVE-2019-17520The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM P
- CVE-2020-8841An issue was discovered in TestLink 1.9.19.
- CVE-2019-17518The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets w
- CVE-2019-17517The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2/3 devices does not properly restrict the L
- CVE-2019-17061The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer hea
- CVE-2019-17060The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and
- CVE-2020-8840FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedicom.fasterxml.jackson.core:jackson-databind
- CVE-2019-6744This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung GSamsung Knox
- CVE-2019-13321This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0.Xiaomi Browser
- CVE-2019-19668A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete t
- CVE-2019-19669A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1.
- CVE-2019-19670A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1.
- CVE-2019-19667A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whiteli
- CVE-2019-19666A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1.
- CVE-2019-19661A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.
- CVE-2019-19662A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.
- CVE-2019-19664A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.
- CVE-2013-2109WordPress plugin wp-cleanfix has Remote Code Executionwp-cleanfix authors wp-cleanfix
- CVE-2013-2108WordPress WP Cleanfix Plugin 2.4.4 has CSRFWP Cleanfix Plugin authors WP Cleanfix Plugin
- CVE-2019-19665A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.
- CVE-2019-19663A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1.
- CVE-2019-19659A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1.
- CVE-2012-5828BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error
- CVE-2019-19660A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1.
- CVE-2012-2204InfoSphere Guardium aix_ktap module: DoSInfoSphere Guardium
- CVE-2012-1994HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access informationHP Systems Insight Manager
- CVE-2020-8089Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page.
- CVE-2012-6449The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.
- CVE-2014-5083A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a r
- CVE-2012-6611An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Devel
- CVE-2019-20451The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk
- CVE-2014-5084A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let a remote malicious u
- CVE-2014-5085A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remot
- CVE-2020-1697It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin console are not valiRed Hat keycloak · org.keycloak:keycloak-core
- CVE-2014-5086A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which
- CVE-2013-1353Orange HRM 2.7.1 allows XSS via the vacancy name.
- CVE-2012-6666vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.
- CVE-2019-20060MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header.
- CVE-2019-20061The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in clea
- CVE-2019-20062MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash never expires until u
- CVE-2019-20059payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0
- CVE-2020-8825index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.
- CVE-2020-7060global buffer-overflow in mbfl_filt_conv_big5_wcharPHP Group PHP
- CVE-2020-7059OOB read in php_strip_tags_exPHP Group PHP
- CVE-2020-8823htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.sockjs
- CVE-2020-8822Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.
- CVE-2017-18641In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap cont