Skip to content
OpenAdvisories

Archive

30 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /30 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-10782

    XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))

    All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.

    com.puppycrawl.tools:checkstyle checkstyle checkstyle Debian Ubuntu Maven
  • Medium 6.9
    CVE-2020-8493 Public exploit

    A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 vi…

  • Medium 6.9
    CVE-2020-8496

    In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability …

  • Medium 4.8
    CVE-2020-5231

    Opencast users with ROLE_COURSE_ADMIN can create new users

    In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither in the documentation …

    opencast opencast org.opencastproject:opencast-kernel Maven
  • Medium 4.9
    CVE-2020-8095

    Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability

    A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.

    Bitdefender Bitdefender Total Security 2020
  • Medium 6.8
    CVE-2020-5222

    Hard-Coded Key Used For Remember-me Token in OpenCast

    Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which al…

    opencast opencast org.opencastproject:opencast-kernel Maven
  • Medium 6.1
    CVE-2012-6133

    Multiple cross-site scripting (XSS) vulnerabilities in Roundup

    Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

    Roundup Roundup roundup PyPI
  • Medium 5.9
    CVE-2020-5233

    Open Redirect in OAuth2 Proxy

    OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

    pusher OAuth2 Proxy github.com/oauth2-proxy/oauth2-proxy Go
  • Medium 6.5
    CVE-2020-8492

    Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HT…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine