Skip to content
OpenAdvisories

Archive

23 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /23 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2012-6649 Public exploit EPSS 16%

    WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

  • Unscored —
    CVE-2012-6663 Public exploit

    General Electric D20ME devices are not properly configured and reveal plaintext passwords.

  • Unscored —
    CVE-2012-5340 Public exploit

    SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corr…

    mupdf Debian
  • Unscored —
    CVE-2013-1592 Public exploit EPSS 24%

    A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending spec…

  • Unscored —
    CVE-2012-6083 Public exploit EPSS 12%

    Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.

    freeciv freeciv freeciv Debian
  • Unscored —
    CVE-2019-15707 Public exploit

    An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow adm…

  • Unscored —
    CVE-2019-16516 Public exploit EPSS 20%

    An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enume…

  • Unscored —
    CVE-2013-6792 Public exploit

    Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability

  • Unscored —
    CVE-2020-7931 Public exploit

    In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modi…

  • Unscored —
    CVE-2013-4175 Public exploit

    MySecureShell 1.31 has a Local Denial of Service Vulnerability

    MySecureShell MySecureShell
  • Unscored —
    CVE-2013-6785 Public exploit

    Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attacke…

  • Unscored —
    CVE-2012-5698 Public exploit

    BabyGekko before 1.2.4 has SQL injection.

  • Unscored —
    CVE-2012-5699 Public exploit

    BabyGekko before 1.2.4 allows PHP file inclusion.

  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven