2020-02-20 - CVE Archive

CVE-2020-6977 Feb 20, 21:15 MEDIUM This Month

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vivid E95 Firmware Vivid E90 Firmware Vivid S70N Firmware Vivid T8 Firmware +13

NVD

CVSS 3.1

6.8

EPSS

0.4%

CVE-2020-8960 Feb 20, 23:15 MEDIUM This Month

Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Mycloud Com Westerndigital

NVD

CVSS 3.1

6.1

EPSS

0.9%

CVE-2020-9320 Feb 20, 22:15 MEDIUM This Month

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft File Upload Antivirus Server Anti Malware Sdk Avira Antivirus For Endpoint +6

NVD

CVSS 3.1

5.5

EPSS

2.9%

CVE-2020-9003 Feb 20, 22:15 MEDIUM This Month

A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Modula Image Gallery Wordpress Plugin Wpchill

NVD GitHub

CVSS 3.1

5.4

EPSS

1.0%