Skip to content
OpenAdvisories

Archive

10 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /10 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2019-6744

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1…

    Samsung Knox
  • Medium 5.5
    CVE-2019-13321

    This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Brow…

    Xiaomi Browser
  • Medium 6.1
    CVE-2020-1697

    XSS in Keycloak

    It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin console are not validated properly and could allow Stored XSS attacks. An authed malicious user could create URLs to trick users in other r…

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 6.5
    CVE-2020-7060

    global buffer-overflow in mbfl_filt_conv_big5_wchar

    When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buff…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7059

    OOB read in php_strip_tags_ex

    When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to informa…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2020-8823

    Cross-site scripting in SocksJS-node

    htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

    sockjs npm