February 2020

13 results · Clear filters · Feed

• High 8.8
  CVE-2020-6418 Exploited Public exploit EPSS 79%

  Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-3837 Exploited Public exploit EPSS 15%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

  Apple macOS watchOS tvOS macOS iOS
  Feb 27, 2020

  KEV Jun 27, 2022
• High 8.1
  CVE-2020-8819 Public exploit

  CardGate Payments plugin for WooCommerce does not validate request origin

  An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID…

  cardgate/woocommerce Packagist
  Feb 25, 2020
• High 7.9
  CVE-2020-5245 Public exploit

  Remote Code Execution (RCE) vulnerability in dropwizard-validation

  Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature. Th…

  dropwizard dropwizard-validation io.dropwizard:dropwizard-validation Maven
  Feb 24, 2020
• High 7.5
  CVE-2020-9283 Public exploit EPSS 21%

  Improper Verification of Cryptographic Signature in golang.org/x/crypto

  golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.

  golang.org/x/crypto golang-go.crypto golang-go.crypto mongo-tools Debian Ubuntu Go
  Feb 20, 2020
• High 8.8
  CVE-2020-0022 Public exploit

  In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds ca…

  Android
  Feb 13, 2020
• High 8.8
  CVE-2020-0688 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …

  Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Cumulative Update 14 Microsoft Exchange Server 2019 Cumulative Update 3
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0683 Exploited Public exploit

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0674 Exploited Public exploit EPSS 87%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• High —
  CVE-2014-8739 Public exploit EPSS 92%

  jQuery File Upload Plugin Unrestricted file upload vulnerability

  Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joom…

  blueimp/jquery-file-upload Packagist
  Feb 8, 2020
• High 7.5
  CVE-2019-19356 Exploited Public exploit EPSS 28%

  Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2019-18988 Exploited Public exploit

  TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for di…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-8655 Exploited Public exploit EPSS 60%

  An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerabilit…

  Feb 6, 2020

  KEV Nov 3, 2021