CVEs published February 16, 2020
7 CVEs were published on February 16, 2020: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- dolibarr/dolibarr
- 1
Medium, low and unrated 7
- CVE-2020-9016Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.dolibarr/dolibarr
- CVE-2020-9013Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.
- CVE-2020-9012A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to
- CVE-2020-9007Codoforum 4.8.8 allows self-XSS via the title of a new topic.
- CVE-2019-20456Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Pat
- CVE-2020-8997Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specifi
- CVE-2020-8996AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/