CVEs published February 13, 2020
123 CVEs were published on February 13, 2020: 0 critical, 17 high.
- Published
- 123
- Critical
- 0
- High
- 17
- Medium
- 0
- Low
- 2
- Unrated
- 104
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Adobe Framemaker
- 21
- Adobe Acrobat and Reader
- 17
- Android
- 14
- Foxit Reader
- 8
- Foxit PhantomPDF
- 6
- Adobe Digital Editions
- 2
- Adobe Experience Manager
- 1
- Adobe Flash Player
- 1
- dojox
- 1
- IBM Tivoli Monitoring
- 1
High 17
- CVE-2020-8858This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.Moxa MGate 5105-MB-EIP
- CVE-2020-8856This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608.Foxit PhantomPDF
- CVE-2020-8857This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8853This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478.Foxit PhantomPDF
- CVE-2020-8854This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478.Foxit PhantomPDF
- CVE-2020-8855This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947.Foxit PhantomPDF
- CVE-2020-8851This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8849This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8850This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8847This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8848This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2020-8845This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.Foxit PhantomPDF
- CVE-2020-8846This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.Foxit PhantomPDF
- CVE-2020-8844This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114.Foxit Reader
- CVE-2019-4592IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITIBM Tivoli Monitoring
- CVE-2020-0022In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation.Android
- CVE-2020-5239Unspecified vulnerability in the fetchmail script in MailuMailu
Medium, low and unrated 106
- CVE-2013-4791PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.prestashop/prestashop
- CVE-2013-4792PrestaShop before 1.4.11 allows logout CSRF.
- CVE-2013-5212Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.
- CVE-2013-5687RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
- CVE-2013-6277QNAP VioCard 300 has hardcoded RSA private keys.
- CVE-2013-6360TRENDnet TS-S402 has a backdoor to enable TELNET.
- CVE-2013-6362Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
- CVE-2013-6927Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.
- CVE-2013-7098OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
- CVE-2020-8852This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455.Foxit Reader
- CVE-2013-7173Belkin n750 routers have a buffer overflow.
- CVE-2013-7287MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
- CVE-2014-1617Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service.
- CVE-2013-1634A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-
- CVE-2013-1401Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5
- CVE-2020-8988The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers (after using root a
- CVE-2020-8989In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different length
- CVE-2013-1400Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL co
- CVE-2015-6589Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 be
- CVE-2019-3998Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify tSimpliSafe SS3 Base Station
- CVE-2015-3309Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files wi
- CVE-2014-3208A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery),
- CVE-2012-6091Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.Magento
- CVE-2014-3919A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspecified page, which co
- CVE-2014-4170A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.ph
- CVE-2012-5623Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.Squirrelmail
- CVE-2014-4198A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of
- CVE-2019-14598Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versIntel(R) CSME
- CVE-2020-0561Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilIntel(R) SGX SDK
- CVE-2020-0562Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially enable escalation of pIntel(R) RWC2
- CVE-2020-0563Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalatioIntel(R) MPSS
- CVE-2020-0564Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentiaIntel® RAID Web Console 3 (RWC3) for Windows
- CVE-2020-8981A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT.
- CVE-2020-0560Improper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all versions, may allow an authenticated user Intel(R) Renesas Electronics(R) USB 3.0 Driver
- CVE-2012-1903XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.
- CVE-2012-1500Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script co
- CVE-2019-10785dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9.dojox
- CVE-2020-3741Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability.Adobe Experience Manager
- CVE-2020-3759Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability.Adobe Digital Editions
- CVE-2020-3760Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability.Adobe Digital Editions
- CVE-2020-3757Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type cAdobe Flash Player
- CVE-2020-3750Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3754Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3752Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3745Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3751Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3755Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3753Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3749Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3744Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3747Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3746Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3743Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3762Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3756Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3763Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-3748Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 andAdobe Acrobat and Reader
- CVE-2020-7051Codologic Codoforum through 4.8.4 allows stored XSS in the login area.
- CVE-2019-4666IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certainIBM UrbanCode Deploy · IBM UrbanCode Build
- CVE-2020-8614An issue was discovered on Askey AP4000W TDC_V1.01.003 devices.
- CVE-2020-8804SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
- CVE-2020-8803SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.
- CVE-2020-8802SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.
- CVE-2020-8801SuiteCRM through 7.11.11 allows PHAR Deserialization.
- CVE-2020-8800SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.
- CVE-2020-3742Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 anAdobe Acrobat and Reader
- CVE-2019-18791Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server.
- CVE-2020-3737Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3724Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3726Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3722Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3725Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3727Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3723Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3740Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability.Adobe Framemaker
- CVE-2020-3732Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3729Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3730Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3731Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability.Adobe Framemaker
- CVE-2020-3728Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3733Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3736Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3738Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3739Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability.Adobe Framemaker
- CVE-2020-3735Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability.Adobe Framemaker
- CVE-2020-3721Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-3734Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability.Adobe Framemaker
- CVE-2020-3720Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-0030In binder_thread_release of binder.c, there is a possible use after free due to a race condition.Android
- CVE-2020-0028In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings.Android
- CVE-2020-0027In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough.Android
- CVE-2020-0026In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free.Android
- CVE-2020-0005In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0023In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permAndroid
- CVE-2020-0021In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependencAndroid
- CVE-2020-0020In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect Android
- CVE-2020-0018In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure.Android
- CVE-2020-0017In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users.Android
- CVE-2019-2200In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another appAndroid
- CVE-2020-0015In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application.Android
- CVE-2020-0014It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable.Android
- CVE-2019-14652explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.
- CVE-2020-8962A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD
- CVE-2020-8953OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).
- CVE-2020-8963TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300
- CVE-2020-8964TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300