Archive

14 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /14 February 2020 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2020-0646 Exploited Public exploit EPSS 99%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows

Jan 14, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2011-2715

Drupal SQL Injection vulnerability

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

Drupal Data-module drupal/core Packagist

Jan 14, 2020
Critical 9.8

CVE-2019-0219

Privilege Escalation in cordova-plugin-inappbrowser

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.

Apache Cordova cordova-plugin-inappbrowser npm

Jan 14, 2020