CVEs published in February 2020
3 tracked CVEs from 3 vendors had their first vendor advisory published in February 2020: 2 in CISA KEV. Newest first.
- Added
CVE-2020-1935Unrated
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid
Apache · 1 advisory - Added
CVE-2020-3153MediumCISA KEV
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Cisco · 1 advisory - Added
CVE-2020-0618UnratedCISA KEV
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
MS Server · 1 advisory