Skip to content
OpenAdvisories

Archive

6 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /6 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2014-3743

    Multiple Content Injection Vulnerabilities in marked

    Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url's.

    marked node-marked Debian npm
  • Medium 6.5
    CVE-2020-5204

    Buffer overflow vulnerability in uftpd

    In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correc…

    troglobit uftpd
  • Medium 4.9
    CVE-2019-15983

    Cisco Data Center Network Manager XML External Entity Read Access Vulnerability

    A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administra…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.4
    CVE-2019-15999 Public exploit

    Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

    A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…

    Cisco Cisco Data Center Network Manager Network devices