Skip to content
OpenAdvisories

Archive

31 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /31 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Unscored —
    CVE-2020-8512 Public exploit Scanner template EPSS 15%

    In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

  • Unscored —
    CVE-2020-8504 Public exploit

    School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrat…

  • Unscored —
    CVE-2020-8505 Public exploit

    School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.

  • Unscored —
    CVE-2014-8322 Public exploit EPSS 24%

    Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote atta…

    aircrack-ng Debian
  • Unscored —
    CVE-2014-3868 Public exploit

    Multiple SQL injection vulnerabilities in ZeusCart 4.x.

  • Unscored —
    CVE-2014-3119 Public exploit

    Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbit…

  • Unscored —
    CVE-2019-13000 Public exploit

    Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md state…

  • High 7.5
    CVE-2019-12999 Public exploit

    Improper Access Control in Lightning Network Daemon

    Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.

    github.com/lightningnetwork/lnd Go
  • Unscored —
    CVE-2019-19550 Public exploit

    Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of …