Skip to content
OpenAdvisories

Archive

January 2020

Vulnerabilities first published in this month (UTC), newest first.

← December 2019 2020 / January February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.9
    CVE-2020-8493 Public exploit

    A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 vi…

  • Medium 5.4
    CVE-2020-7934 Public exploit

    Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet

    In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be …

    com.liferay.portal:release.portal.bom Maven
  • Medium 6.1
    CVE-2019-17573 Public exploit

    Reflected Cross-Site Scripting in Apache CXF

    By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web p…

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • Medium 4.8
    CVE-2020-2655 Public exploit

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

    Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2020-2096 Public exploit EPSS 93%

    Reflected XSS vulnerability in Jenkins gitlab-hook Plugin

    Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.

    Jenkins Project Jenkins Gitlab Hook Plugin org.jenkins-ci.ruby-plugins:gitlab-hook Web / CMS Maven
  • Medium 6.5
    CVE-2020-1611 Public exploit

    Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

    A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

    Juniper Networks Junos Space Network devices
  • Medium 5.4
    CVE-2019-15999 Public exploit

    Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

    A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…

    Cisco Cisco Data Center Network Manager Network devices