# CVEs published 2020-02-11

209 CVEs were published on February 11, 2020: 8 critical, 7 high. 4 are now in CISA KEV. Days are UTC.

- [CVE-2020-8890](https://cve.now/CVE-2020-8890.md): An issue was discovered in MISP before 2.4.121. (no CVSS)
- [CVE-2020-8891](https://cve.now/CVE-2020-8891.md): An issue was discovered in MISP before 2.4.121. (no CVSS)
- [CVE-2020-8892](https://cve.now/CVE-2020-8892.md): An issue was discovered in MISP before 2.4.121. (no CVSS)
- [CVE-2020-0792](https://cve.now/CVE-2020-0792.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows)
- [CVE-2020-0759](https://cve.now/CVE-2020-0759.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2020-0767](https://cve.now/CVE-2020-0767.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0756](https://cve.now/CVE-2020-0756.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0757](https://cve.now/CVE-2020-0757.md): An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka 'Windows SSH Elevati (no CVSS, Microsoft Windows)
- [CVE-2020-0753](https://cve.now/CVE-2020-0753.md): An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Repo (no CVSS, Microsoft Windows)
- [CVE-2020-0754](https://cve.now/CVE-2020-0754.md): An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Repo (no CVSS, Microsoft Windows)
- [CVE-2020-0755](https://cve.now/CVE-2020-0755.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0751](https://cve.now/CVE-2020-0751.md): A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a u (no CVSS, Microsoft Windows)
- [CVE-2020-0752](https://cve.now/CVE-2020-0752.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind (no CVSS, Microsoft Windows)
- [CVE-2020-0749](https://cve.now/CVE-2020-0749.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0750](https://cve.now/CVE-2020-0750.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0747](https://cve.now/CVE-2020-0747.md): An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data S (no CVSS, Microsoft Windows)
- [CVE-2020-0748](https://cve.now/CVE-2020-0748.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0745](https://cve.now/CVE-2020-0745.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows)
- [CVE-2020-0746](https://cve.now/CVE-2020-0746.md): An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphi (no CVSS, Microsoft Windows)
- [CVE-2020-0743](https://cve.now/CVE-2020-0743.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0744](https://cve.now/CVE-2020-0744.md): An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi (no CVSS, Microsoft Windows)
- [CVE-2020-0741](https://cve.now/CVE-2020-0741.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0742](https://cve.now/CVE-2020-0742.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0739](https://cve.now/CVE-2020-0739.md): An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation (no CVSS, Microsoft Windows)
- [CVE-2020-0740](https://cve.now/CVE-2020-0740.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-0736](https://cve.now/CVE-2020-0736.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2020-0737](https://cve.now/CVE-2020-0737.md): An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows Elevation of Privileg (no CVSS, Microsoft Windows)
- [CVE-2020-0738](https://cve.now/CVE-2020-0738.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-0734](https://cve.now/CVE-2020-0734.md): A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De (no CVSS, Microsoft Windows)
- [CVE-2020-0735](https://cve.now/CVE-2020-0735.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind (no CVSS, Microsoft Windows)
- [CVE-2020-0732](https://cve.now/CVE-2020-0732.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-0733](https://cve.now/CVE-2020-0733.md): An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.To explo (no CVSS, Microsoft Windows Malicious Software Removal Tool 32-bit ·…)
- [CVE-2020-0730](https://cve.now/CVE-2020-0730.md): An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows Use (no CVSS, Microsoft Windows)
- [CVE-2020-0731](https://cve.now/CVE-2020-0731.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0728](https://cve.now/CVE-2020-0728.md): An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Insta (no CVSS, Microsoft Windows)
- [CVE-2020-0729](https://cve.now/CVE-2020-0729.md): A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta (no CVSS, Microsoft Windows)
- [CVE-2020-0726](https://cve.now/CVE-2020-0726.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0727](https://cve.now/CVE-2020-0727.md): An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations, (no CVSS, Microsoft Windows)
- [CVE-2020-0724](https://cve.now/CVE-2020-0724.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0725](https://cve.now/CVE-2020-0725.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0721](https://cve.now/CVE-2020-0721.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0722](https://cve.now/CVE-2020-0722.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0723](https://cve.now/CVE-2020-0723.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0719](https://cve.now/CVE-2020-0719.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0720](https://cve.now/CVE-2020-0720.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2020-0716](https://cve.now/CVE-2020-0716.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2020-0717](https://cve.now/CVE-2020-0717.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2020-0714](https://cve.now/CVE-2020-0714.md): An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-0715](https://cve.now/CVE-2020-0715.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows)
- [CVE-2020-0712](https://cve.now/CVE-2020-0712.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0713](https://cve.now/CVE-2020-0713.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0709](https://cve.now/CVE-2020-0709.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-0710](https://cve.now/CVE-2020-0710.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0711](https://cve.now/CVE-2020-0711.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0707](https://cve.now/CVE-2020-0707.md): An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker wou (no CVSS, Microsoft Windows)
- [CVE-2020-0708](https://cve.now/CVE-2020-0708.md): A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an at (no CVSS, Microsoft Windows)
- [CVE-2020-0705](https://cve.now/CVE-2020-0705.md): An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To e (no CVSS, Microsoft Windows)
- [CVE-2020-0706](https://cve.now/CVE-2020-0706.md): An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Brow (no CVSS, Microsoft Edge (EdgeHTML-based) on Windows · Microsoft Inte…)
- [CVE-2020-0703](https://cve.now/CVE-2020-0703.md): An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabil (no CVSS, Microsoft Windows)
- [CVE-2020-0704](https://cve.now/CVE-2020-0704.md): An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerabi (no CVSS, Microsoft Windows)
- [CVE-2020-0701](https://cve.now/CVE-2020-0701.md): An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka ' (no CVSS, Microsoft Windows)
- [CVE-2020-0702](https://cve.now/CVE-2020-0702.md): A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulne (no CVSS, Microsoft Surface Hub)
- [CVE-2020-0696](https://cve.now/CVE-2020-0696.md): A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Mic (no CVSS, Microsoft Office · Microsoft Outlook)
- [CVE-2020-0697](https://cve.now/CVE-2020-0697.md): An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this (no CVSS, Microsoft Office 365 ProPlus)
- [CVE-2020-0698](https://cve.now/CVE-2020-0698.md): An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Info (no CVSS, Microsoft Windows)
- [CVE-2020-0694](https://cve.now/CVE-2020-0694.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0695](https://cve.now/CVE-2020-0695.md): A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft (no CVSS, Microsoft Office Online Server)
- [CVE-2020-0692](https://cve.now/CVE-2020-0692.md): An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi (no CVSS, Microsoft Exchange Server)
- [CVE-2020-0693](https://cve.now/CVE-2020-0693.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0688](https://cve.now/CVE-2020-0688.md): A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak (CVSS 8.8, KEV, Microsoft Exchange Server)
- [CVE-2020-0689](https://cve.now/CVE-2020-0689.md): A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'. (no CVSS, Microsoft Windows)
- [CVE-2020-0691](https://cve.now/CVE-2020-0691.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-0685](https://cve.now/CVE-2020-0685.md): An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Pri (no CVSS, Microsoft Windows)
- [CVE-2020-0686](https://cve.now/CVE-2020-0686.md): An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele (no CVSS, Microsoft Windows)
- [CVE-2020-0682](https://cve.now/CVE-2020-0682.md): An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Window (no CVSS, Microsoft Windows)
- [CVE-2020-0683](https://cve.now/CVE-2020-0683.md): An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-0680](https://cve.now/CVE-2020-0680.md): An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Window (no CVSS, Microsoft Windows)
- [CVE-2020-0681](https://cve.now/CVE-2020-0681.md): A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De (no CVSS, Microsoft Windows)
- [CVE-2020-0677](https://cve.now/CVE-2020-0677.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0678](https://cve.now/CVE-2020-0678.md): An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Report (no CVSS, Microsoft Windows)
- [CVE-2020-0679](https://cve.now/CVE-2020-0679.md): An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Window (no CVSS, Microsoft Windows)
- [CVE-2020-0675](https://cve.now/CVE-2020-0675.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0676](https://cve.now/CVE-2020-0676.md): An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in (no CVSS, Microsoft Windows)
- [CVE-2020-0673](https://cve.now/CVE-2020-0673.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0674](https://cve.now/CVE-2020-0674.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (CVSS 7.5, KEV, Microsoft Internet Explorer)
- [CVE-2020-0670](https://cve.now/CVE-2020-0670.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-0671](https://cve.now/CVE-2020-0671.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-0672](https://cve.now/CVE-2020-0672.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-0668](https://cve.now/CVE-2020-0668.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o (no CVSS, Microsoft Windows)
- [CVE-2020-0669](https://cve.now/CVE-2020-0669.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o (no CVSS, Microsoft Windows)
- [CVE-2020-0666](https://cve.now/CVE-2020-0666.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind (no CVSS, Microsoft Windows)
- [CVE-2020-0667](https://cve.now/CVE-2020-0667.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind (no CVSS, Microsoft Windows)
- [CVE-2020-0663](https://cve.now/CVE-2020-0663.md): An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an att (no CVSS, Microsoft Edge (EdgeHTML-based) on Windows)
- [CVE-2020-0665](https://cve.now/CVE-2020-0665.md): An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trust (no CVSS, Microsoft Windows)
- [CVE-2020-0660](https://cve.now/CVE-2020-0660.md): A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends (no CVSS, Microsoft Windows)
- [CVE-2020-0661](https://cve.now/CVE-2020-0661.md): A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on (no CVSS, Microsoft Windows)
- [CVE-2020-0662](https://cve.now/CVE-2020-0662.md): A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerabi (no CVSS, Microsoft Windows)
- [CVE-2020-0658](https://cve.now/CVE-2020-0658.md): An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects (no CVSS, Microsoft Windows)
- [CVE-2020-0659](https://cve.now/CVE-2020-0659.md): An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data S (no CVSS, Microsoft Windows)
- [CVE-2020-0655](https://cve.now/CVE-2020-0655.md): A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated at (no CVSS, Microsoft Windows)
- [CVE-2020-0657](https://cve.now/CVE-2020-0657.md): An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a (no CVSS, Microsoft Windows)
- [CVE-2020-0618](https://cve.now/CVE-2020-0618.md): A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Micr (CVSS 9.8, KEV, Microsoft SQL Server)
- [CVE-2020-1942](https://cve.now/CVE-2020-1942.md): In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values (no CVSS, Apache NiFi · org.apache.nifi:nifi-framework-core +1)
- [CVE-2020-6066](https://cve.now/CVE-2020-6066.md): An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. (CVSS 9.8, Accusoft)
- [CVE-2020-6067](https://cve.now/CVE-2020-6067.md): An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. (CVSS 9.8, Accusoft)
- [CVE-2020-6063](https://cve.now/CVE-2020-6063.md): An exploitable out-of-bounds write vulnerability exists in the uncompress\_scan\_line function of the igcore19d.dll library of Accusoft ImageG (CVSS 9.8, Accusoft)
- [CVE-2020-6069](https://cve.now/CVE-2020-6069.md): An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 (CVSS 9.8, Accusoft)
- [CVE-2020-6064](https://cve.now/CVE-2020-6064.md): An exploitable out-of-bounds write vulnerability exists in the uncompress\_scan\_line function of the igcore19d.dll library of Accusoft ImageG (CVSS 9.8, Accusoft)
- [CVE-2020-6065](https://cve.now/CVE-2020-6065.md): An exploitable out-of-bounds write vulnerability exists in the bmp\_parsing function of the igcore19d.dll library of Accusoft ImageGear, vers (CVSS 9.8, Accusoft)
- [CVE-2013-4225](https://cve.now/CVE-2013-4225.md): The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to e (no CVSS, RESTful Web Services)
- [CVE-2011-4938](https://cve.now/CVE-2011-4938.md): Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the P (no CVSS, Ariadne)
- [CVE-2012-1124](https://cve.now/CVE-2012-1124.md): SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the se (no CVSS, phxEventManager)
- [CVE-2012-6720](https://cve.now/CVE-2012-6720.md): Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2012-6721](https://cve.now/CVE-2012-6721.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4 (no CVSS)
- [CVE-2020-1726](https://cve.now/CVE-2020-1726.md): A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are (CVSS 5.9, The podman · github.com/containers/libpod +3)
- [CVE-2020-1711](https://cve.now/CVE-2020-1711.md): An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response (CVSS 7.7, Red Hat QEMU)
- [CVE-2012-2452](https://cve.now/CVE-2012-2452.md): Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2013-2213](https://cve.now/CVE-2013-2213.md): The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential (no CVSS, KDE Paste Applet)
- [CVE-2012-2517](https://cve.now/CVE-2012-2517.md): Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the i (no CVSS)
- [CVE-2013-2120](https://cve.now/CVE-2013-2120.md): The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate pa (no CVSS, KDE Paste Applet)
- [CVE-2014-3826](https://cve.now/CVE-2014-3826.md): Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2013-5582](https://cve.now/CVE-2013-5582.md): Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers t (no CVSS)
- [CVE-2014-3827](https://cve.now/CVE-2014-3827.md): Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to injec (no CVSS)
- [CVE-2009-4067](https://cve.now/CVE-2009-4067.md): Buffer overflow in the auerswald\_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proxi (no CVSS)
- [CVE-2014-9753](https://cve.now/CVE-2014-9753.md): confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto\_logi (no CVSS)
- [CVE-2013-3684](https://cve.now/CVE-2013-3684.md): NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload (no CVSS)
- [CVE-2013-2057](https://cve.now/CVE-2013-2057.md): YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability (no CVSS, YaBB)
- [CVE-2013-5988](https://cve.now/CVE-2013-5988.md): A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter. (no CVSS)
- [CVE-2013-3942](https://cve.now/CVE-2013-3942.md): Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability (no CVSS, Daum Potplayer)
- [CVE-2013-1760](https://cve.now/CVE-2013-1760.md): The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities (no CVSS)
- [CVE-2013-1607](https://cve.now/CVE-2013-1607.md): Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability (no CVSS, pdfkit)
- [CVE-2012-4519](https://cve.now/CVE-2012-4519.md): Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS. (no CVSS, Zenphoto)
- [CVE-2020-8429](https://cve.now/CVE-2020-8429.md): The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. (no CVSS)
- [CVE-2020-5831](https://cve.now/CVE-2020-5831.md): Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of (no CVSS, Symantec Endpoint Protection Manager)
- [CVE-2020-5830](https://cve.now/CVE-2020-5830.md): Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of (no CVSS, Symantec Endpoint Protection Manager)
- [CVE-2020-5829](https://cve.now/CVE-2020-5829.md): Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of (no CVSS, Symantec Endpoint Protection Manager)
- [CVE-2020-5828](https://cve.now/CVE-2020-5828.md): Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of (no CVSS, Symantec Endpoint Protection Manager)
- [CVE-2020-5827](https://cve.now/CVE-2020-5827.md): Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of (no CVSS, Symantec Endpoint Protection Manager)
- [CVE-2020-5826](https://cve.now/CVE-2020-5826.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2020-5825](https://cve.now/CVE-2020-5825.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2020-5824](https://cve.now/CVE-2020-5824.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2013-0517](https://cve.now/CVE-2013-0517.md): A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified O (no CVSS, IBM Sterling External Authentication Server)
- [CVE-2020-5823](https://cve.now/CVE-2020-5823.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2020-5822](https://cve.now/CVE-2020-5822.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2020-5821](https://cve.now/CVE-2020-5821.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2020-5820](https://cve.now/CVE-2020-5820.md): Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14. (no CVSS, Symantec Endpoint Protection (SEP) and Symantec Endpoint Pr…)
- [CVE-2013-0803](https://cve.now/CVE-2013-0803.md): A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code. (no CVSS)
- [CVE-2014-9748](https://cve.now/CVE-2014-9748.md): The uv\_rwlock\_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasin (no CVSS)
- [CVE-2013-1359](https://cve.now/CVE-2013-1359.md): An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Un (no CVSS)
- [CVE-2014-6447](https://cve.now/CVE-2014-6447.md): Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web s (no CVSS)
- [CVE-2013-1360](https://cve.now/CVE-2013-1360.md): An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Un (no CVSS)
- [CVE-2019-13925](https://cve.now/CVE-2019-13925.md): A vulnerability has been identified in SCALANCE S602 (All versions \>= V3.0 and \< V4.1), SCALANCE S612 (All versions \>= V3.0 and \< V4.1), SCA (no CVSS, Siemens SCALANCE S602 · Siemens SCALANCE S612 +2)
- [CVE-2019-13926](https://cve.now/CVE-2019-13926.md): A vulnerability has been identified in SCALANCE S602 (All versions \>= V3.0 and \< V4.1), SCALANCE S612 (All versions \>= V3.0 and \< V4.1), SCA (no CVSS, Siemens SCALANCE S602 · Siemens SCALANCE S612 +2)
- [CVE-2019-13940](https://cve.now/CVE-2019-13940.md): A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions \< V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (A (CVSS 5.3, Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU · Siemens S… +24)
- [CVE-2019-13941](https://cve.now/CVE-2019-13941.md): A vulnerability has been identified in OZW672 (All versions \< V10.00), OZW772 (All versions \< V10.00). (no CVSS, Siemens AG OZW672 · Siemens AG OZW772)
- [CVE-2019-13946](https://cve.now/CVE-2019-13946.md): Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic packag (CVSS 7.5, Siemens Development/Evaluation Kits for PROFINET IO: D… +112)
- [CVE-2013-4535](https://cve.now/CVE-2013-4535.md): The virtqueue\_map\_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted sa (no CVSS, QEMU)
- [CVE-2014-2052](https://cve.now/CVE-2014-2052.md): Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a de (no CVSS)
- [CVE-2020-6412](https://cve.now/CVE-2020-6412.md): Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spo (no CVSS, Google Chrome)
- [CVE-2020-6413](https://cve.now/CVE-2020-6413.md): Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a craft (no CVSS, Google Chrome)
- [CVE-2020-6414](https://cve.now/CVE-2020-6414.md): Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restr (no CVSS, Google Chrome)
- [CVE-2020-6415](https://cve.now/CVE-2020-6415.md): Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corr (no CVSS, Google Chrome)
- [CVE-2020-6416](https://cve.now/CVE-2020-6416.md): Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corrupt (no CVSS, Google Chrome)
- [CVE-2020-6417](https://cve.now/CVE-2020-6417.md): Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a cr (no CVSS, Google Chrome)
- [CVE-2020-6380](https://cve.now/CVE-2020-6380.md): Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the rend (no CVSS, Google Chrome)
- [CVE-2020-6381](https://cve.now/CVE-2020-6381.md): Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially explo (no CVSS, Google Chrome)
- [CVE-2020-6382](https://cve.now/CVE-2020-6382.md): Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a c (no CVSS, Google Chrome)
- [CVE-2020-6385](https://cve.now/CVE-2020-6385.md): Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a c (no CVSS, Google Chrome)
- [CVE-2020-6387](https://cve.now/CVE-2020-6387.md): Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a (no CVSS, Google Chrome)
- [CVE-2020-6388](https://cve.now/CVE-2020-6388.md): Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via (no CVSS, Google Chrome)
- [CVE-2020-6389](https://cve.now/CVE-2020-6389.md): Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a (no CVSS, Google Chrome)
- [CVE-2020-6390](https://cve.now/CVE-2020-6390.md): Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corrupti (no CVSS, Google Chrome)
- [CVE-2020-6391](https://cve.now/CVE-2020-6391.md): Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content securi (no CVSS, Google Chrome)
- [CVE-2020-6392](https://cve.now/CVE-2020-6392.md): Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a m (no CVSS, Google Chrome)
- [CVE-2020-6393](https://cve.now/CVE-2020-6393.md): Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a cr (no CVSS, Google Chrome)
- [CVE-2020-6394](https://cve.now/CVE-2020-6394.md): Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy (no CVSS, Google Chrome)
- [CVE-2020-6395](https://cve.now/CVE-2020-6395.md): Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive informatio (no CVSS, Google Chrome)
- [CVE-2020-6396](https://cve.now/CVE-2020-6396.md): Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox ( (no CVSS, Google Chrome)
- [CVE-2020-6397](https://cve.now/CVE-2020-6397.md): Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted (no CVSS, Google Chrome)
- [CVE-2020-6398](https://cve.now/CVE-2020-6398.md): Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption (no CVSS, Google Chrome)
- [CVE-2020-6399](https://cve.now/CVE-2020-6399.md): Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a (no CVSS, Google Chrome)
- [CVE-2020-6400](https://cve.now/CVE-2020-6400.md): Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafte (no CVSS, Google Chrome)
- [CVE-2020-6401](https://cve.now/CVE-2020-6401.md): Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spo (no CVSS, Google Chrome)
- [CVE-2020-6402](https://cve.now/CVE-2020-6402.md): Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to inst (no CVSS, Google Chrome)
- [CVE-2020-6403](https://cve.now/CVE-2020-6403.md): Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omn (no CVSS, Google Chrome)
- [CVE-2020-6404](https://cve.now/CVE-2020-6404.md): Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruptio (no CVSS, Google Chrome)
- [CVE-2020-6405](https://cve.now/CVE-2020-6405.md): Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information fr (no CVSS, Google Chrome)
- [CVE-2020-6406](https://cve.now/CVE-2020-6406.md): Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafte (no CVSS, Google Chrome)
- [CVE-2020-6408](https://cve.now/CVE-2020-6408.md): Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive info (no CVSS, Google Chrome)
- [CVE-2020-6409](https://cve.now/CVE-2020-6409.md): Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a U (no CVSS, Google Chrome)
- [CVE-2020-6410](https://cve.now/CVE-2020-6410.md): Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a cra (no CVSS, Google Chrome)
- [CVE-2020-6411](https://cve.now/CVE-2020-6411.md): Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spo (no CVSS, Google Chrome)
- [CVE-2020-6378](https://cve.now/CVE-2020-6378.md): Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a craf (no CVSS, Google Chrome)
- [CVE-2020-6379](https://cve.now/CVE-2020-6379.md): Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted (no CVSS, Google Chrome)
- [CVE-2019-18210](https://cve.now/CVE-2019-18210.md): Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users (Teacher and above) to inject JavaScript into the s (no CVSS, moodle/moodle)
- [CVE-2014-8347](https://cve.now/CVE-2014-8347.md): An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Adv (no CVSS)
- [CVE-2020-5529](https://cve.now/CVE-2020-5529.md): HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. (CVSS 8.1, HtmlUnit Project HtmlUnit · net.sourceforge.htmlunit:htmlun…)
- [CVE-2020-3935](https://cve.now/CVE-2020-3935.md): TAIWAN SECOM CO., LTD. – Sensitivity Information Exposure (CVSS 7.5, TAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…)
- [CVE-2020-3934](https://cve.now/CVE-2020-3934.md): TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection (CVSS 9.8, TAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…)
- [CVE-2020-3933](https://cve.now/CVE-2020-3933.md): TAIWAN SECOM CO., LTD. - User Account Enumeration (CVSS 5.3, TAIWAN SECOM CO. Door Access Control system · TAIWAN SECOM…)
- [CVE-2013-4267](https://cve.now/CVE-2013-4267.md): Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive\_name parameter to (no CVSS, Ajaxeplorer)
- [CVE-2014-0148](https://cve.now/CVE-2014-0148.md): Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries (no CVSS, Qemu)
- [CVE-2014-0147](https://cve.now/CVE-2014-0147.md): Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possib (no CVSS, Qemu)
- [CVE-2014-0144](https://cve.now/CVE-2014-0144.md): QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, i (no CVSS)
- [CVE-2013-5945](https://cve.now/CVE-2013-5945.md): Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DS (no CVSS)
- [CVE-2018-14553](https://cve.now/CVE-2018-14553.md): gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif (no CVSS)
- [CVE-2019-13924](https://cve.now/CVE-2019-13924.md): A vulnerability has been identified in SCALANCE S602 (All versions \< V4.1), SCALANCE S612 (All versions \< V4.1), SCALANCE S623 (All versions (no CVSS, Siemens SCALANCE S602 · Siemens SCALANCE S612 +6)
- [CVE-2020-8893](https://cve.now/CVE-2020-8893.md): An issue was discovered in MISP before 2.4.121. (no CVSS)
- [CVE-2020-8894](https://cve.now/CVE-2020-8894.md): An issue was discovered in MISP before 2.4.121. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-02-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.