Skip to content
OpenAdvisories

Archive

24 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /24 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.7
    CVE-2020-5219

    Remote Code Execution in Angular Expressions

    Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker co…

    peerigon angular-expressions angular-expressions npm
  • High 7.5
    CVE-2020-7226

    Denial of Service in Cryptacular

    CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input wi…

    org.cryptacular:cryptacular Maven
  • High 7.7
    CVE-2019-3699

    Local privilege escalation from user privoxy to root

    UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior ver…

    openSUSE Factory Leap 15.1
  • High 7.7
    CVE-2019-3697

    Local privilege escalation from user gnump3d to root

    UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.

    openSUSE Leap 15.1
  • High 7.7
    CVE-2019-3694

    Local privilege escalation from munin to root in the packaging of munin

    A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE L…

    openSUSE Factory Leap 15.1
  • High 7.7
    CVE-2019-3693

    Local privilege escalation from user wwwrun to root in the packaging of mailman

    A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files c…

    SUSE openSUSE SUSE Linux Enterprise Server 12 Leap 15.1 Linux
  • High 7.7
    CVE-2019-3692

    Local privilege escalation from user news to root in the packaging of inn

    The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versi…

    SUSE openSUSE Factory Leap 15.1 Linux