Skip to content
OpenAdvisories

Archive

31 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /31 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Unscored —
    CVE-2013-5112

    Evernote before 5.5.1 has insecure PIN storage

  • Unscored —
    CVE-2019-19550 Public exploit

    Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of …

  • Unscored —
    CVE-2020-8440

    controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by…

  • Unscored —
    CVE-2013-3322

    NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot…

  • Critical 9.8
    CVE-2020-7956

    Improper Certificate Validation in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.

    nomad github.com/hashicorp/nomad Ubuntu Go
  • High 7.5
    CVE-2020-7219

    Denial of Service (DoS) in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

    k3d k3d-proxy k3d-tools consul Debian Ubuntu Wolfi Go
  • High 7.5
    CVE-2020-7218

    Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

    HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 5.3
    CVE-2020-7955

    Incorrect Authorization in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • Unscored —
    CVE-2020-7914

    In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over …

    intellij-community-idea Ubuntu
  • Unscored —
    CVE-2020-5526

    The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from serve…

    Fuji Xerox AWMS Mobile App
  • Unscored —
    CVE-2019-18913

    A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks…

    HP HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Windows