Skip to content
OpenAdvisories

Archive

January 2020

Vulnerabilities first published in this month (UTC), newest first.

← December 2019 2020 / January February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-7956

    Improper Certificate Validation in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.

    nomad github.com/hashicorp/nomad Ubuntu Go
  • Critical 9.8
    CVE-2019-10783

    OS Command Injection in lsof

    All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.

    lsof npm
  • Critical 9.1
    CVE-2019-20444

    HTTP Request Smuggling in Netty

    HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

    druid netty netty io.netty:netty-codec-http Debian Ubuntu Wolfi Maven
  • Critical 9.8
    CVE-2020-3718

    Magento security bypass vulnerability

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    Adobe Magento magento/community-edition magneto/core Web / CMS Packagist
  • Critical 9.8
    CVE-2020-3716 EPSS 14%

    Magento deserialization vulnerability

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

    Adobe Magento magento/community-edition Web / CMS Packagist
  • Critical 9.8
    CVE-2020-7247 Exploited Public exploit Scanner template EPSS 99%

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

    opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2020-4207

    IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by imp…

    IBM IoT MessageSight WIoTP MessageGateway
  • Critical 9.0
    CVE-2019-17096

    Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability

    A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.

    Bitdefender Bitdefender BOX 2
  • Critical 9.8
    CVE-2020-7995

    Dolibarr Improper Restriction of Excessive Authentication Attempts

    The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2020-7981

    SQL Injection in Geocoder

    sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data.

    geocoder ruby-geocoder Debian RubyGems
  • Critical 9.8
    CVE-2014-4172

    Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

    A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web s…

    php-cas DotNetCasClient jasig/phpcas org.jasig.cas:cas-client Debian Packagist Maven NuGet
  • Critical 9.9
    CVE-2019-19896

    In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The defa…

  • Critical 10.0
    CVE-2019-19897

    In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can com…

  • Critical 9.8
    CVE-2020-7941

    Plone Unauthenticated Write Vulnerability

    A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.

    plone plone-app-contenttypes PyPI
  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven
  • Critical 9.0
    CVE-2019-17201

    FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to e…

  • Critical 9.8
    CVE-2019-10781

    Validation Bypass in schema-inspector

    In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

    snyk schema-inspector schema-inspector npm
  • Critical 9.8
    CVE-2019-10780

    BibTeX-Ruby vulnerable to OS command injection

    BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.

    bibtex-ruby RubyGems
  • Critical 9.8
    CVE-2011-4943

    ImpressPages CMS RCE

    ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)

    ImpressPages CMS ImpressPages CMS impresspages/impresspages Packagist
  • Critical 9.8
    CVE-2015-2784

    papercrop does not properly handle crop input

    The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

    papercrop RubyGems
  • Critical 9.8
    CVE-2019-17361 EPSS 15%

    SaltStack Salt is vulnerable to command injection

    In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.

    salt salt salt Ubuntu Alpine PyPI
  • Critical 9.9
    CVE-2020-7047

    The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal per…

    Web / CMS
  • Critical 9.1
    CVE-2020-7048 Public exploit EPSS 23%

    The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any…

    Web / CMS
  • Critical 9.9
    CVE-2020-2587

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supp…

    Oracle Human Resources
  • Critical 9.9
    CVE-2020-2586

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supp…

    Oracle Human Resources
  • Critical 9.8
    CVE-2020-2551 Exploited Public exploit Scanner template EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

    Oracle WebLogic Server
    KEV Nov 16, 2023
  • Critical 9.8
    CVE-2020-2555 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

    Oracle WebCenter Portal Utilities Framework
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-2546 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - Jav…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2020-0646 Exploited Public exploit EPSS 99%

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

    Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2011-2715

    Drupal SQL Injection vulnerability

    An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

    Drupal Data-module drupal/core Packagist
  • Critical 9.8
    CVE-2019-0219

    Privilege Escalation in cordova-plugin-inappbrowser

    A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.

    Apache Cordova cordova-plugin-inappbrowser npm
  • Critical 9.8
    CVE-2020-6948

    HashBrown CMS RCE

    A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.

    hashbrown-cms npm
  • Critical 9.8
    CVE-2020-6836

    Command Injection in hot-formula-parser

    grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection. The package fails to sanitize values passed to the parse function and concatenates them in an eval call. If a value of the formula is ta…

    hot-formula-parser npm
  • Critical 9.0
    CVE-2019-18588

    Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, …

    Dell Unisphere for PowerMax
  • Critical 9.8
    CVE-2020-6756 Public exploit EPSS 11%

    languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to r…

  • Critical 9.6
    CVE-2020-6167

    A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable mai…

    Web / CMS
  • Critical 9.8
    CVE-2019-10777

    OS command injection in aws-lambda

    In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.Func…

    aws-lambda npm
  • Critical 9.8
    CVE-2019-10778

    OS Command Injection in devcert-sanscache

    devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization.

    devcert-sanscache npm
  • Critical 9.8
    CVE-2019-10776

    OS command injection in git-diff-apply

    In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.

    git-diff-apply npm
  • Critical 9.1
    CVE-2019-14837

    keycloak vulnerable to unauthorized login via mail server setup

    A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be …

    Red Hat keycloak org.keycloak:keycloak-core Maven