Skip to content
OpenAdvisories

Archive

3 February 2020

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-8597 Public exploit EPSS 20%

    eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

  • Unscored —
    CVE-2019-16893 Public exploit EPSS 38%

    The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot th…

  • Unscored —
    CVE-2020-8547 Public exploit

    phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which …

  • Unscored —
    CVE-2013-2624 Public exploit

    Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitiv…

  • Unscored —
    CVE-2013-2623 Public exploit

    Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via th…

  • Unscored —
    CVE-2013-2621 Public exploit Scanner template EPSS 11%

    Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victi…

  • Critical 9.8
    CVE-2020-7471 Public exploit EPSS 66%

    SQL injection in Django

    Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter).…