Skip to content
OpenAdvisories

Archive

January 2020

Vulnerabilities first published in this month (UTC), newest first.

← December 2019 2020 / January February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

1,661 results · Feed

  • Unscored —
    CVE-2019-9538

    Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

    : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue af…

    Telos Automated Message Handling System
  • Unscored —
    CVE-2019-9537

    Telos Automated Message Handling System reflected XSS in uploaditem.asp

    : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Tel…

    Telos Automated Message Handling System
  • Unscored —
    CVE-2019-19959

    ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charac…

    sqlite3 sqlite3 Debian Ubuntu
  • Unscored —
    CVE-2014-8516 Public exploit EPSS 82%

    Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2014-8337

    Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier…

  • Unscored —
    CVE-2014-5516

    Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.…

  • Unscored —
    CVE-2014-5140 Public exploit

    The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly h…

  • Unscored —
    CVE-2014-10398

    Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client…

  • Unscored —
    CVE-2014-4196

    Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allows remote attac…

  • Unscored —
    CVE-2012-5878 Public exploit

    Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2012-5693

    Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via…

  • Unscored —
    CVE-2019-11994

    A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380…

  • Unscored —
    CVE-2019-11993

    A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380…

  • High 8.8
    CVE-2019-5064 EPSS 11%

    Out-of-bounds Write in OpenCV

    An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code ex…

    opencv-python opencv-contrib-python opencv opencv-python-headless Debian PyPI
  • High 8.8
    CVE-2019-5063 EPSS 21%

    Out-of-bounds Write in OpenCV

    An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacke…

    opencv-python opencv-contrib-python opencv opencv-python-headless Debian PyPI
  • Unscored —
    CVE-2019-19310

    GitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.

  • Unscored —
    CVE-2019-19309

    GitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control.

  • Unscored —
    CVE-2019-19263

    GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.

  • Unscored —
    CVE-2019-19262

    GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.

  • Unscored —
    CVE-2019-19261

    GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.

  • Unscored —
    CVE-2019-19260

    GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2).

    gitlab Ubuntu
  • Unscored —
    CVE-2019-19259

    GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR).

  • Unscored —
    CVE-2019-19258

    GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control.

  • Unscored —
    CVE-2019-19257

    GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2).

    gitlab Ubuntu
  • Unscored —
    CVE-2019-19256

    GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control.

  • Unscored —
    CVE-2019-19255

    GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control.

  • Unscored —
    CVE-2012-4451

    Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inje…

    Zend Zend Framework zend-framework Ubuntu
  • Unscored —
    CVE-2019-19254

    GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control.

  • Unscored —
    CVE-2019-19088

    Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.

  • Unscored —
    CVE-2019-19087

    Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).

  • Unscored —
    CVE-2019-19086

    Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).

  • Unscored —
    CVE-2019-19311

    GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.

  • Unscored —
    CVE-2020-1785

    Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly …

  • Unscored —
    CVE-2019-5304

    Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Ec…

  • Unscored —
    CVE-2020-1871

    USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100;…

  • Unscored —
    CVE-2019-19441

    HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An a…

  • Critical 9.8
    CVE-2019-20330

    Deserialization of Untrusted Data in jackson-databind

    FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 8.8
    CVE-2020-5310

    Integer overflow in Pillow

    libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

    pillow pillow py3-pillow Debian Alpine PyPI
  • Critical 9.8
    CVE-2020-5311

    Buffer Copy without Checking Size of Input in Pillow

    libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.

    pillow pillow pillow py3-pillow Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2020-5312

    PCX P mode buffer overflow in Pillow

    libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

    pillow pillow pillow py3-pillow Debian Ubuntu Alpine PyPI