Skip to content
OpenAdvisories

Archive

9 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /9 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.3
    CVE-2019-20374

    A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to …

  • High 7.4
    CVE-2020-6757

    contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers …

  • High 8.8
    CVE-2020-5504 Public exploit EPSS 28%

    phpMyAdmin SQL injection in user accounts page

    In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • High 7.6
    CVE-2020-6168

    A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with ba…

    Web / CMS
  • High 7.5
    CVE-2020-1925

    Server-Side Request Forgery (SSRF) in Apache Olingo

    Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE request to this URL. It may allow to implement a SSRF attack. If an attacker tricks a client to connect …

    Apache Software Foundation Apache Olingo org.apache.olingo:odata-client-core Maven
  • High 7.5
    CVE-2014-3211

    Publify vulnerable to DoS attack

    Publify before 8.0.1 is vulnerable to a Denial of Service attack

    publify_core RubyGems
  • High 7.5
    CVE-2014-2686

    Ansible unsafe evaluation of some strings

    Ansible prior to 1.5.4 mishandles the evaluation of some strings.

    ansible ansible Debian PyPI