Skip to content
OpenAdvisories

Archive

February 2020

Vulnerabilities first published in this month (UTC), newest first.

← January 2020 2020 / February March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

1,406 results · Feed

  • Unscored —
    CVE-2009-4067 Public exploit

    Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 al…

  • Unscored —
    CVE-2014-9753

    confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing u…

  • Unscored —
    CVE-2013-3684 Public exploit EPSS 19%

    NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload

  • Unscored —
    CVE-2013-2057

    YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability

    YaBB YaBB
  • Unscored —
    CVE-2013-5988

    A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via th…

  • Unscored —
    CVE-2013-3942

    Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability

    Daum Potplayer
  • Unscored —
    CVE-2013-1760

    The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities

  • Critical 9.8
    CVE-2013-1607

    PDFKit Improper Input Validation vulnerability

    Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability

    pdfkit RubyGems
  • Unscored —
    CVE-2012-4519

    Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.

    Zenphoto Zenphoto
  • Unscored —
    CVE-2020-8429

    The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getL…

  • Unscored —
    CVE-2020-5831

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerabilit…

  • Unscored —
    CVE-2020-5830

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerabilit…

  • Unscored —
    CVE-2020-5829

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerabilit…

  • Unscored —
    CVE-2020-5828

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerabilit…

  • Unscored —
    CVE-2020-5827

    Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerabilit…

  • Unscored —
    CVE-2020-5826

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2020-5825

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2020-5824

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2013-0517

    A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1…

    IBM Sterling External Authentication Server
  • Unscored —
    CVE-2020-5823

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2020-5822

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2020-5821

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2020-5820

    Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2…

  • Unscored —
    CVE-2013-0803 Public exploit EPSS 75%

    A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute ar…

  • Unscored —
    CVE-2014-9748

    The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent …

    nodejs Debian
  • Unscored —
    CVE-2013-1359 Public exploit EPSS 89%

    An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, …

  • Unscored —
    CVE-2014-6447

    Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues…

  • Unscored —
    CVE-2013-1360 Public exploit EPSS 23%

    An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and …

  • High 7.5
    CVE-2019-13946

    Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitim…

    Siemens SCALANCE M876-4 (NAM) SCALANCE M874-2 SCALANCE M876-4 (EU) ICS / OT
  • Unscored —
    CVE-2019-13925

    A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

    Siemens SCALANCE S602 SCALANCE S623 SCALANCE S612 ICS / OT
  • Medium 5.3
    CVE-2019-13940

    A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro …

    Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) SIMATIC S7-300 CPU 315F-2 PN/DP ICS / OT
  • Unscored —
    CVE-2019-13926

    A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

    Siemens SCALANCE S612 SCALANCE S627-2M SCALANCE S602 ICS / OT
  • Unscored —
    CVE-2019-13941

    A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versi…

    Siemens OZW672 OZW772 ICS / OT
  • Unscored —
    CVE-2013-4535

    The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary f…

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2014-2052

    Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitr…

  • Unscored —
    CVE-2020-6415

    Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentia…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • Unscored —
    CVE-2020-6416

    Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • Unscored —
    CVE-2020-6417

    Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute ar…

    Google Chrome chromium-browser Browsers Ubuntu
  • Unscored —
    CVE-2020-6414

    Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to by…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • Unscored —
    CVE-2020-6412

    Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker …

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu