Skip to content
OpenAdvisories

Archive

6 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /6 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2014-8674 Public exploit

    Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the do…

  • Unscored —
    CVE-2015-4553 Public exploit EPSS 57%

    A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.

  • Unscored —
    CVE-2019-19509 Public exploit EPSS 72%

    An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a…

  • Unscored —
    CVE-2015-4039 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authen…

  • Unscored —
    CVE-2020-5515 Public exploit EPSS 27%

    Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

  • Critical 9.8
    CVE-2019-15977 Public exploit EPSS 38%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.2
    CVE-2019-15978 Public exploit EPSS 37%

    Cisco Data Center Network Manager Command Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operati…

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.2
    CVE-2019-15984 Public exploit EPSS 47%

    Cisco Data Center Network Manager SQL Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would …

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.4
    CVE-2019-15999 Public exploit

    Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

    A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15975 Public exploit EPSS 96%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15976 Public exploit EPSS 93%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Unscored —
    CVE-2019-20354 Public exploit

    The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user…

  • Unscored —
    CVE-2020-5191 Public exploit Scanner template

    PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.

  • Unscored —
    CVE-2020-5192 Public exploit Scanner template EPSS 24%

    PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages a…