Skip to content
OpenAdvisories

Archive

16 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /16 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.0
    CVE-2020-5398 Public exploit EPSS 88%

    RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

    In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where th…

    Spring Spring Framework libspring-java org.springframework:spring-webmvc Ubuntu Maven
  • High 8.8
    CVE-2019-5145

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A…

  • High 8.0
    CVE-2019-5130

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader versio…

  • High 8.8
    CVE-2019-5126

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A…

  • High 8.8
    CVE-2019-5131

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, versi…

  • High 7.9
    CVE-2019-9500

    Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

    The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffe…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.9
    CVE-2019-9503

    Broadcom brcmfmac driver is vulnerable to a frame validation bypass

    The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this…

    Broadcom brcmfmac WiFi driver linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.5
    CVE-2019-12423

    Private key leak in Apache CXF

    Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local …

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • High 7.1
    CVE-2019-13939

    A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (Al…

    Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT