Security Vulnerabilities - CVEs Published In February 2020
WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities
CVSS Score
9.1
EPSS Score
0.009
Published
2020-02-18
It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks.
CVSS Score
9.8
EPSS Score
0.021
Published
2020-02-18
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml.
CVSS Score
9.8
EPSS Score
0.094
Published
2020-02-18
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.
CVSS Score
6.5
EPSS Score
0.004
Published
2020-02-18
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding
CVSS Score
4.3
EPSS Score
0.003
Published
2020-02-18
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
CVSS Score
9.8
EPSS Score
0.004
Published
2020-02-18
Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score
8.8
EPSS Score
0.001
Published
2020-02-18
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.
CVSS Score
6.8
EPSS Score
0.001
Published
2020-02-18
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.
CVSS Score
9.8
EPSS Score
0.809
Published
2020-02-18
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.
CVSS Score
7.5
EPSS Score
0.012
Published
2020-02-18