Skip to content
OpenAdvisories

Archive

25 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /25 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.8
    CVE-2020-7981

    SQL Injection in Geocoder

    sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data.

    geocoder ruby-geocoder Debian RubyGems
  • Unscored —
    CVE-2013-1744 Public exploit

    IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.

  • Unscored —
    CVE-2012-6613

    D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the adm…

  • Unscored —
    CVE-2020-7980 Public exploit Scanner template EPSS 83%

    Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to t…

  • Unscored —
    CVE-2012-6494

    Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user'…

  • Unscored —
    CVE-2012-6345

    Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.

  • Unscored —
    CVE-2012-6344

    Novell ZENworks Configuration Management before 11.2.4 allows XSS.

  • High 8.8
    CVE-2020-7596

    Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov

    Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

    codecov npm
  • Unscored —
    CVE-2019-5183

    An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.…

  • Unscored —
    CVE-2019-5146

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A special…

  • Unscored —
    CVE-2019-5147

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A speciall…

  • Unscored —
    CVE-2019-5124

    An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A special…