Skip to content
OpenAdvisories

Archive

9 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /9 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-6756 Public exploit EPSS 11%

    languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to r…

  • High 8.8
    CVE-2020-5504 Public exploit EPSS 28%

    phpMyAdmin SQL injection in user accounts page

    In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Unscored —
    CVE-2012-3810 Public exploit

    Samsung Kies before 2.5.0.12094_27_11 has registry modification.

  • Unscored —
    CVE-2012-3809 Public exploit

    Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.

  • Unscored —
    CVE-2012-3808 Public exploit

    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.

  • Unscored —
    CVE-2012-3807 Public exploit EPSS 32%

    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.

  • Unscored —
    CVE-2012-2226 Public exploit

    Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain se…

  • Unscored —
    CVE-2012-1915 Public exploit

    EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.

  • Unscored —
    CVE-2019-18859 Public exploit

    Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.

  • Unscored —
    CVE-2019-20372 Public exploit EPSS 15%

    NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the abil…

    nginx nginx nginx Debian Ubuntu Alpine
  • Unscored —
    CVE-2012-1261 Public exploit

    Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow…

  • Unscored —
    CVE-2012-1260 Public exploit

    Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow A…

  • Unscored —
    CVE-2012-1259 Public exploit

    Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and po…

  • Unscored —
    CVE-2012-1258 Public exploit

    cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate…

  • Unscored —
    CVE-2019-20224 Public exploit Scanner template EPSS 50%

    netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary …

  • Unscored —
    CVE-2019-19494 Public exploit EPSS 23%

    Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker…