Security Vulnerabilities - CVEs Published In February 2020
IZON IP 2.0.2: hard-coded password vulnerability
CVSS Score
9.8
EPSS Score
0.436
Published
2020-02-12
Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability
CVSS Score
5.9
EPSS Score
0.007
Published
2020-02-12
IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.
CVSS Score
5.9
EPSS Score
0.001
Published
2020-02-12
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888.
CVSS Score
5.4
EPSS Score
0.002
Published
2020-02-12
IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.
CVSS Score
5.3
EPSS Score
0.003
Published
2020-02-12
Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2
CVSS Score
7.5
EPSS Score
0.002
Published
2020-02-12
Zimbra 2013 has XSS in aspell.php
CVSS Score
6.1
EPSS Score
0.023
Published
2020-02-12
ZPanel through 10.1.0 has Remote Command Execution
CVSS Score
7.8
EPSS Score
0.127
Published
2020-02-12
A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a malicious user execute arbitrary code.
CVSS Score
7.8
EPSS Score
0.002
Published
2020-02-12
A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.
CVSS Score
7.0
EPSS Score
0.001
Published
2020-02-12