Skip to content
OpenAdvisories

Archive

17 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /17 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-5397

    CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

    Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable b…

    Spring Spring Framework libspring-java org.springframework:spring-webmvc Ubuntu Maven
  • Medium 6.5
    CVE-2019-19339

    It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A f…

    Red Hat kpatch:
  • Medium 6.5
    CVE-2019-3686

    XSS in distri and version parameter in openQA

    openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security

    SUSE openQA