Archive

11 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /11 March 2020 →

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

High 7.5

CVE-2020-0767 EPSS 18%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0713 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0712 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0711 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0710 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 8.8

CVE-2020-0688 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …

Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2019 Cumulative Update 3 Microsoft Exchange Server 2016 Cumulative Update 14

Feb 11, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-0683 Exploited Public exploit

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
KEV Nov 3, 2021
High 7.5

CVE-2020-0674 Exploited Public exploit EPSS 87%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows

Feb 11, 2020
KEV Nov 3, 2021
High 7.5

CVE-2020-1942

Insertion of Sensitive Information into Log File in Apache NiFi

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of bot…

org.apache.nifi:nifi-framework-core org.apache.nifi:nifi-security-utils Maven

Feb 11, 2020
High 7.7

CVE-2020-1711

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2…

Red Hat QEMU: qemu qemu Virtualization Debian Ubuntu

Feb 11, 2020
High 7.5

CVE-2019-13946

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitim…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Feb 11, 2020
High 8.1

CVE-2020-5529

Code execution vulnerability in HtmlUnit

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specif…

HtmlUnit htmlunit htmlunit net.sourceforge.htmlunit:htmlunit Ubuntu Maven

Feb 11, 2020
High 7.5

CVE-2020-3935

TAIWAN SECOM CO., LTD. – Sensitivity Information Exposure

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers.

TAIWAN SECOM CO., LTD., Door Access Control system Personnel Attendance system

Feb 11, 2020