Skip to content
OpenAdvisories

Archive

15 January 2020

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2009-5068 Public exploit

    There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some conf…

  • Medium 4.8
    CVE-2020-2655 Public exploit

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  • Critical 9.8
    CVE-2020-2551 Exploited Public exploit Scanner template EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

    KEV Nov 16, 2023
  • Critical 9.8
    CVE-2020-2555 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-2546 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - Jav…

  • Unscored —
    CVE-2005-4891 Public exploit

    Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers …

  • Unscored —
    CVE-2015-5466 Public exploit

    Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1…

  • Medium 6.1
    CVE-2020-2096 Public exploit Scanner template EPSS 93%

    Reflected XSS vulnerability in Jenkins gitlab-hook Plugin

    Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.

  • Unscored —
    CVE-2015-7874 Public exploit EPSS 14%

    Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2015-7556 Public exploit

    DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.

  • Unscored —
    CVE-2011-4336 Public exploit Scanner template

    Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

  • Unscored —
    CVE-2012-1563 Public exploit

    Joomla! before 2.5.3 allows Admin Account Creation.

  • Medium 6.5
    CVE-2020-1611 Public exploit

    Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

    A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.