CVEs published February 14, 2020
34 CVEs were published on February 14, 2020: 2 critical, 1 high.
- Published
- 34
- Critical
- 2
- High
- 1
- Medium
- 9
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Lenovo XClarity Administrator
- 3
- Accusoft
- 2
- GitLab
- 2
- EXTRUN ilbo App
- 1
- globalpayments/php-sdk
- 1
- IBM HCL AppScan Standard Edition
- 1
- jsreport
- 1
- Lenovo BIOS
- 1
- Lenovo EZ Media & Backup Center ix2 · Lenovo EZ Media & Bac…
- 1
- Lenovo XClarity Controller
- 1
Critical 2
- CVE-2019-5187An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear Accusoft
- CVE-2020-6068An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library.Accusoft
High 1
Medium, low and unrated 31
- CVE-2020-8128An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitjsreport
- CVE-2019-15594GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request eGitLab
- CVE-2020-8129An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.script-manager
- CVE-2019-15592GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associatGitLab
- CVE-2019-4392HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized accessIBM HCL AppScan Standard Edition
- CVE-2019-13967iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to launch a compile ope
- CVE-2019-13966In iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the XML file used to build the dashboard.
- CVE-2019-13965Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via the param_file param
- CVE-2013-4211A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remoOpenX Ad Server
- CVE-2020-8594The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptc
- CVE-2020-8843An issue was discovered in Istio 1.3 through 1.3.6.
- CVE-2020-8612In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious i
- CVE-2020-8611In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the
- CVE-2019-11215In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling
- CVE-2019-6195An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid Lenovo XClarity Controller
- CVE-2019-6194An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that coulLenovo XClarity Administrator
- CVE-2019-6190Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in Lenovo BIOS
- CVE-2019-19758A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unautheLenovo EZ Media & Backup Center ix2 · Lenovo EZ Media & Bac…
- CVE-2019-19757An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scriptiLenovo XClarity Administrator
- CVE-2019-19879HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions.
- CVE-2019-20045The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior.
- CVE-2019-20046The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior.
- CVE-2018-21032A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote user
- CVE-2018-21033A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analyti
- CVE-2019-20455Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.globalpayments/php-sdk
- CVE-2020-7251ESConfig Tool able to edit configuration for newer versionMcafee Endpoint Security
- CVE-2020-5532ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network sEXTRUN ilbo App
- CVE-2020-8991vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pv
- CVE-2020-8992ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (sof
- CVE-2016-2338An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby.
- CVE-2019-20454An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects i