Skip to content
OpenAdvisories

Archive

January 2020

Vulnerabilities first published in this month (UTC), newest first.

← December 2019 2020 / January February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-7247 Exploited Public exploit Scanner template EPSS 99%

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

    opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven
  • Critical 9.1
    CVE-2020-7048 Public exploit EPSS 23%

    The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any…

    Web / CMS
  • Critical 9.8
    CVE-2020-2551 Exploited Public exploit Scanner template EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

    Oracle WebLogic Server
    KEV Nov 16, 2023
  • Critical 9.8
    CVE-2020-2555 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

    Oracle WebCenter Portal Utilities Framework
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-2546 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - Jav…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2020-0646 Exploited Public exploit EPSS 99%

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

    Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-6756 Public exploit EPSS 11%

    languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to r…

  • Critical 9.8
    CVE-2019-15977 Public exploit EPSS 38%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15975 Public exploit EPSS 96%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15976 Public exploit EPSS 93%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2016-1000027 Public exploit EPSS 33%

    Pivotal Spring Framework contains unsafe Java deserialization methods

    Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authenticatio…

    libspring-java org.springframework:spring-web Debian Maven