2020-01-24 - CVE Archive

CVE-2020-7052 Jan 24, 20:15 MEDIUM POC This Month

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Codesys Gateway Control Runtime System Toolkit Control Rte +12

NVD

CVSS 3.1

6.5

EPSS

1.9%

CVE-2020-5226 Jan 24, 22:15 MEDIUM PATCH This Month

Cross-site scripting in SimpleSAMLphp before version 1.18.4. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simplesamlphp

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-5225 Jan 24, 21:15 MEDIUM PATCH This Month

Log injection in SimpleSAMLphp before version 1.18.4. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Code Injection Simplesamlphp

NVD GitHub

CVSS 3.1

5.4

EPSS

0.7%

CVE-2020-7964 Jan 24, 20:15 MEDIUM PATCH This Month

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Saleor Mirumee

NVD GitHub

CVSS 3.1

5.3

EPSS

1.1%