CVEs published February 11, 2020
209 CVEs were published on February 11, 2020: 8 critical, 7 high. 4 are now in CISA KEV.
- Published
- 209
- Critical
- 8
- High
- 7
- Medium
- 5
- Low
- 0
- Unrated
- 189
- Now in CISA KEV
- 4
- Fix available
- 46
Most affected products
- Microsoft Windows
- 79
- Google Chrome
- 36
- Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- 7
- Accusoft
- 6
- Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- 5
- Symantec Endpoint Protection Manager
- 5
- TAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…
- 3
- KDE Paste Applet
- 2
- Microsoft Exchange Server
- 2
- Microsoft Internet Explorer
- 2
Critical 8
- CVE-2020-0618A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'MicrMicrosoft SQL Server
- CVE-2020-6066An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library.Accusoft
- CVE-2020-6067An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library.Accusoft
- CVE-2020-6063An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGAccusoft
- CVE-2020-6069An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0Accusoft
- CVE-2020-6064An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGAccusoft
- CVE-2020-6065An exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the igcore19d.dll library of Accusoft ImageGear, versAccusoft
- CVE-2020-3934TAIWAN SECOM CO., LTD. - Pre-auth SQL InjectionTAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…
High 7
- CVE-2020-0688A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, akMicrosoft Exchange Server
- CVE-2020-0683An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer EleMicrosoft Windows
- CVE-2020-0674A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2020-1711An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a responseRed Hat QEMU
- CVE-2019-13946Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic packagSiemens Development/Evaluation Kits for PROFINET IO: D… +112
- CVE-2020-5529HtmlUnit prior to 2.37.0 contains code execution vulnerabilities.HtmlUnit Project HtmlUnit · net.sourceforge.htmlunit:htmlun…
- CVE-2020-3935TAIWAN SECOM CO., LTD. – Sensitivity Information ExposureTAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…
Medium, low and unrated 194
- CVE-2020-8890An issue was discovered in MISP before 2.4.121.
- CVE-2020-8891An issue was discovered in MISP before 2.4.121.
- CVE-2020-8892An issue was discovered in MISP before 2.4.121.
- CVE-2020-0792An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-0759A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Office · Microsoft Excel
- CVE-2020-0767A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0756An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0757An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka 'Windows SSH ElevatiMicrosoft Windows
- CVE-2020-0753An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoMicrosoft Windows
- CVE-2020-0754An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoMicrosoft Windows
- CVE-2020-0755An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0751A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a uMicrosoft Windows
- CVE-2020-0752An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndMicrosoft Windows
- CVE-2020-0749An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0750An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0747An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data SMicrosoft Windows
- CVE-2020-0748An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0745An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-0746An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphiMicrosoft Windows
- CVE-2020-0743An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0744An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowiMicrosoft Windows
- CVE-2020-0741An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0742An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0739An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creationMicrosoft Windows
- CVE-2020-0740An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-0736An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2020-0737An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows Elevation of PrivilegMicrosoft Windows
- CVE-2020-0738A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0734A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote DeMicrosoft Windows
- CVE-2020-0735An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndMicrosoft Windows
- CVE-2020-0732An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-0733An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.To exploMicrosoft Windows Malicious Software Removal Tool 32-bit ·…
- CVE-2020-0730An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows UseMicrosoft Windows
- CVE-2020-0731An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0728An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules InstaMicrosoft Windows
- CVE-2020-0729A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaMicrosoft Windows
- CVE-2020-0726An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0727An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations,Microsoft Windows
- CVE-2020-0724An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0725An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0721An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0722An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0723An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0719An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0720An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0716An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-0717An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-0714An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure VulnerMicrosoft Windows
- CVE-2020-0715An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-0712A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0713A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0709An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-0710A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0711A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0707An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker wouMicrosoft Windows
- CVE-2020-0708A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an atMicrosoft Windows
- CVE-2020-0705An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To eMicrosoft Windows
- CVE-2020-0706An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft BrowMicrosoft Edge (EdgeHTML-based) on Windows · Microsoft Inte…
- CVE-2020-0703An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabilMicrosoft Windows
- CVE-2020-0704An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerabiMicrosoft Windows
- CVE-2020-0701An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Microsoft Windows
- CVE-2020-0702A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass VulneMicrosoft Surface Hub
- CVE-2020-0696A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'MicMicrosoft Office · Microsoft Outlook
- CVE-2020-0697An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited thisMicrosoft Office 365 ProPlus
- CVE-2020-0698An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows InfoMicrosoft Windows
- CVE-2020-0694A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0695A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Microsoft Office Online Server
- CVE-2020-0692An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege VulnerabiMicrosoft Exchange Server
- CVE-2020-0693A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0689A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.Microsoft Windows
- CVE-2020-0691An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-0685An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of PriMicrosoft Windows
- CVE-2020-0686An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer EleMicrosoft Windows
- CVE-2020-0682An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowMicrosoft Windows
- CVE-2020-0680An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowMicrosoft Windows
- CVE-2020-0681A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote DeMicrosoft Windows
- CVE-2020-0677An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0678An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error ReportMicrosoft Windows
- CVE-2020-0679An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowMicrosoft Windows
- CVE-2020-0675An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0676An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects inMicrosoft Windows
- CVE-2020-0673A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2020-0670An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-0671An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-0672An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-0668An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oMicrosoft Windows
- CVE-2020-0669An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oMicrosoft Windows
- CVE-2020-0666An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndMicrosoft Windows
- CVE-2020-0667An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndMicrosoft Windows
- CVE-2020-0663An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attMicrosoft Edge (EdgeHTML-based) on Windows
- CVE-2020-0665An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trustMicrosoft Windows
- CVE-2020-0660A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sendsMicrosoft Windows
- CVE-2020-0661A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on Microsoft Windows
- CVE-2020-0662A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution VulnerabiMicrosoft Windows
- CVE-2020-0658An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects Microsoft Windows
- CVE-2020-0659An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data SMicrosoft Windows
- CVE-2020-0655A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated atMicrosoft Windows
- CVE-2020-0657An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aMicrosoft Windows
- CVE-2020-1942In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor valuesApache NiFi · org.apache.nifi:nifi-framework-core +1
- CVE-2013-4225The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to eRESTful Web Services
- CVE-2011-4938Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PAriadne
- CVE-2012-1124SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the sephxEventManager
- CVE-2012-6720Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HT
- CVE-2012-6721Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4
- CVE-2020-1726A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they areThe podman · github.com/containers/libpod +3
- CVE-2012-2452Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or H
- CVE-2013-2213The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruentialKDE Paste Applet
- CVE-2012-2517Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the i
- CVE-2013-2120The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate paKDE Paste Applet
- CVE-2014-3826Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via
- CVE-2013-5582Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers t
- CVE-2014-3827Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to injec
- CVE-2009-4067Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proxi
- CVE-2014-9753confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_logi
- CVE-2013-3684NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload
- CVE-2013-2057YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include VulnerabilityYaBB
- CVE-2013-5988A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
- CVE-2013-3942Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution VulnerabilityDaum Potplayer
- CVE-2013-1760The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
- CVE-2013-1607Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerabilitypdfkit
- CVE-2012-4519Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.Zenphoto
- CVE-2020-8429The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs.
- CVE-2020-5831Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type ofSymantec Endpoint Protection Manager
- CVE-2020-5830Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type ofSymantec Endpoint Protection Manager
- CVE-2020-5829Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type ofSymantec Endpoint Protection Manager
- CVE-2020-5828Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type ofSymantec Endpoint Protection Manager
- CVE-2020-5827Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type ofSymantec Endpoint Protection Manager
- CVE-2020-5826Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2020-5825Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2020-5824Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2013-0517A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OIBM Sterling External Authentication Server
- CVE-2020-5823Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2020-5822Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2020-5821Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2020-5820Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…
- CVE-2013-0803A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
- CVE-2014-9748The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasin
- CVE-2013-1359An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Un
- CVE-2014-6447Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web s
- CVE-2013-1360An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Un
- CVE-2019-13925A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCASiemens SCALANCE S602 · Siemens SCALANCE S612 +2
- CVE-2019-13926A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCASiemens SCALANCE S602 · Siemens SCALANCE S612 +2
- CVE-2019-13940A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (ASiemens SIMATIC ET 200pro IM154-8 PN/DP CPU · Siemens S… +24
- CVE-2019-13941A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00).Siemens AG OZW672 · Siemens AG OZW772
- CVE-2013-4535The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted saQEMU
- CVE-2014-2052Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a de
- CVE-2020-6412Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoGoogle Chrome
- CVE-2020-6413Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a craftGoogle Chrome
- CVE-2020-6414Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrGoogle Chrome
- CVE-2020-6415Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2020-6416Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruptGoogle Chrome
- CVE-2020-6417Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crGoogle Chrome
- CVE-2020-6380Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2020-6381Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploGoogle Chrome
- CVE-2020-6382Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a cGoogle Chrome
- CVE-2020-6385Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a cGoogle Chrome
- CVE-2020-6387Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2020-6388Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2020-6389Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2020-6390Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruptiGoogle Chrome
- CVE-2020-6391Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content securiGoogle Chrome
- CVE-2020-6392Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a mGoogle Chrome
- CVE-2020-6393Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crGoogle Chrome
- CVE-2020-6394Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy Google Chrome
- CVE-2020-6395Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive informatioGoogle Chrome
- CVE-2020-6396Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (Google Chrome
- CVE-2020-6397Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted Google Chrome
- CVE-2020-6398Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2020-6399Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via aGoogle Chrome
- CVE-2020-6400Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2020-6401Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoGoogle Chrome
- CVE-2020-6402Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to instGoogle Chrome
- CVE-2020-6403Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the OmnGoogle Chrome
- CVE-2020-6404Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2020-6405Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2020-6406Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2020-6408Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive infoGoogle Chrome
- CVE-2020-6409Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a UGoogle Chrome
- CVE-2020-6410Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a craGoogle Chrome
- CVE-2020-6411Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoGoogle Chrome
- CVE-2020-6378Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2020-6379Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2019-18210Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users (Teacher and above) to inject JavaScript into the smoodle/moodle
- CVE-2014-8347An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Adv
- CVE-2020-3933TAIWAN SECOM CO., LTD. - User Account EnumerationTAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…
- CVE-2013-4267Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter toAjaxeplorer
- CVE-2014-0148Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entriesQemu
- CVE-2014-0147Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possibQemu
- CVE-2014-0144QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, i
- CVE-2013-5945Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DS
- CVE-2018-14553gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif
- CVE-2019-13924A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versionsSiemens SCALANCE S602 · Siemens SCALANCE S612 +6
- CVE-2020-8893An issue was discovered in MISP before 2.4.121.
- CVE-2020-8894An issue was discovered in MISP before 2.4.121.