CVEs published February 21, 2020
26 CVEs were published on February 21, 2020: 0 critical, 1 high.
- Published
- 26
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Dell Client Consumer and Commercial Platforms
- 2
- NEC Aterm series
- 2
- NEC Aterm WG2600HS
- 2
- Autonomy KeyView IDOL
- 1
- curl
- 1
- Debian x11-common
- 1
- Google Android
- 1
- HTTPS protocol
- 1
- netsurf
- 1
- sqlite
- 1
High 1
Medium, low and unrated 25
- CVE-2020-9330Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changin
- CVE-2020-9329Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition.
- CVE-2020-9327In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generatedsqlite
- CVE-2019-18846OX App Suite through 7.10.2 allows SSRF.
- CVE-2020-7907In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.
- CVE-2012-1093The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation dDebian x11-common
- CVE-2012-0844Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.netsurf
- CVE-2012-0828Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause aXchat-WDK · xchat
- CVE-2013-3587The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unenHTTPS protocol
- CVE-2012-6277Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before Autonomy KeyView IDOL
- CVE-2020-6842D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in t
- CVE-2013-4088Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 d
- CVE-2012-0063Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbittucan
- CVE-2013-3551Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, an
- CVE-2020-6841D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyC
- CVE-2019-19865Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS.
- CVE-2019-19866Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitiv
- CVE-2020-5326Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage ReDell Client Consumer and Commercial Platforms
- CVE-2019-19452A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040.
- CVE-2020-5533Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script orNEC Aterm WG2600HS
- CVE-2020-5534Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands wNEC Aterm WG2600HS
- CVE-2020-5524Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 anNEC Aterm series
- CVE-2020-5525Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 anNEC Aterm series
- CVE-2014-7914btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted rGoogle Android
- CVE-2016-4606Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensiticurl