Skip to content
OpenAdvisories

Archive

10 February 2020

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2019-14514 Public exploit

    An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu…

  • Critical 9.8
    CVE-2020-8840 Public exploit EPSS 27%

    Deserialization of Untrusted Data in jackson-databind

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

  • Critical 9.4
    CVE-2019-17137 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…

  • Unscored —
    CVE-2013-2108 Public exploit

    WordPress WP Cleanfix Plugin 2.4.4 has CSRF

  • Unscored —
    CVE-2014-5083 Public exploit

    A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php…

  • Unscored —
    CVE-2014-5084 Public exploit

    A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let…

  • Unscored —
    CVE-2014-5085 Public exploit

    A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, wh…

  • Unscored —
    CVE-2014-5086 Public exploit

    A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrit…

  • Unscored —
    CVE-2019-20059 Public exploit

    payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values…

  • Unscored —
    CVE-2020-8825 Public exploit

    index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.