Skip to content
OpenAdvisories

Archive

4 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /4 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.9
    CVE-2020-8123

    Uncontrolled Resource Consumption in strapi

    A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.

    strapi-admin npm
  • Medium 5.3
    CVE-2020-8124

    Improper Validation and Sanitization in url-parse

    Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

    url-parse node-url-parse node-url-parse Debian Ubuntu npm
  • Medium 6.6
    CVE-2020-4163

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated use…

    IBM WebSphere Application Server
  • Medium 6.8
    CVE-2019-4675

    IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it …

    IBM Security Identity Manager
  • Medium 6.8
    CVE-2019-4674

    IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker co…

    IBM Security Identity Manager
  • Medium 5.3
    CVE-2019-4551

    IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality a…

    IBM Security Directory Server
  • Medium 6.1
    CVE-2019-4548

    IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persu…

    IBM Security Directory Server
  • Medium 6.5
    CVE-2019-4541

    IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass …

    IBM Security Directory Server
  • Medium 5.3
    CVE-2019-4550

    IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM…

    IBM Security Directory Server
  • Medium 5.9
    CVE-2019-4540

    IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to …

    IBM Security Directory Server
  • Medium 5.4
    CVE-2019-4451

    IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

    IBM Security Identity Manager
  • Medium 6.1
    CVE-2020-3939

    SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)

    SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site Scripting(XSS), personal information may be leaked to attackers via the vulnerability.

    Changing Syuan-Gu-Da-Shih
  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…

    Pylons Waitress waitress PyPI
  • Medium 6.5
    CVE-2020-5235

    Out-of-memory condition in Nanopb is potentially exploitable

    There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PB_ENABLE_MALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc() runs out of memo…

    nanopb nanopb