Skip to content
OpenAdvisories

Archive

11 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /11 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.6
    CVE-2020-6847

    OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a m…

  • Unscored —
    CVE-2019-20377

    TopList before 2019-09-03 allows XSS via a title.

  • Unscored —
    CVE-2019-20378

    ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

    ganglia-web ganglia-web Debian Ubuntu
  • Unscored —
    CVE-2019-20379

    ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

    ganglia-web ganglia-web Debian Ubuntu
  • Unscored —
    CVE-2020-6838

    In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.

    mruby Ubuntu
  • Unscored —
    CVE-2020-6839

    In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.

    mruby Ubuntu
  • Unscored —
    CVE-2020-6840

    In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.

    mruby Ubuntu
  • Critical 9.8
    CVE-2020-6836

    Command Injection in hot-formula-parser

    grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection. The package fails to sanitize values passed to the parse function and concatenates them in an eval call. If a value of the formula is ta…

    hot-formula-parser npm