Skip to content
OpenAdvisories

Archive

5 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /5 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2020-5306

    Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.

  • Unscored —
    CVE-2020-5305

    Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen.

  • Unscored —
    CVE-2019-20155

    An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. …

  • Unscored —
    CVE-2019-20154

    An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site script…

  • Unscored —
    CVE-2019-20153

    An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external …

  • Unscored —
    CVE-2019-20077

    The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel…

  • Unscored —
    CVE-2019-20004

    An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain…

  • High 7.5
    CVE-2019-19911

    Uncontrolled Resource Consumption in Pillow

    There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due …

    pillow pillow pillow py3-pillow Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2019-19629

    In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private co…

  • Unscored —
    CVE-2019-19628

    In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registr…

  • Unscored —
    CVE-2019-19314

    GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

  • Unscored —
    CVE-2019-19313

    GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible …

  • Unscored —
    CVE-2019-19312

    GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previ…

  • Unscored —
    CVE-2019-20336

    In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.

  • Unscored —
    CVE-2019-20337

    In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injecti…