Skip to content
OpenAdvisories

Archive

23 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /23 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2019-19893

    In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticate…

  • High 8.8
    CVE-2019-19895

    In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client syste…

  • High 7.5
    CVE-2019-19898

    In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the…

  • High 8.8
    CVE-2020-7938

    Plone Privilege Escallation

    plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.

    plone plone-restapi PyPI
  • High 8.8
    CVE-2020-7939

    Plone SQL Injection Vulnerability

    SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)

    plone PyPI
  • High 7.5
    CVE-2020-7940

    Plone allows weak passwords

    Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.

    plone PyPI
  • High 7.5
    CVE-2020-7220

    Improper Resource Shutdown or Release in HashiCorp Vault

    HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.

    github.com/hashicorp/vault Go
  • High 7.5
    CVE-2019-14888

    Undertow vulnerable to Uncontrolled Resource Consumption

    A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • High 7.7
    CVE-2019-3691

    Local privilege escalation from user munge to root

    A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge …

    SUSE openSUSE Factory SUSE Linux Enterprise Server 15 Linux
  • High 7.7
    CVE-2019-18898

    trousers: Local privilege escalation from tss to root

    UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 tr…

    SUSE openSUSE Factory SUSE Linux Enterprise Server 15 SP1 Linux
  • High 8.2
    CVE-2019-17202

    FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to e…