Skip to content
OpenAdvisories

Archive

12 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /12 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Unscored —
    CVE-2020-7209 Public exploit Scanner template EPSS 99%

    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

  • Unscored —
    CVE-2019-18915 Public exploit

    A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to versio…

  • Unscored —
    CVE-2011-4908 Public exploit EPSS 56%

    TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

    Joomla! Project TinyBrowser Plugin Web / CMS
  • Unscored —
    CVE-2011-4906 Public exploit

    Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

    Joomla! Project Tiny browser included with TinyMCE 3.0
  • Unscored —
    CVE-2020-8950 Public exploit

    The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of …

  • Unscored —
    CVE-2011-3336 Public exploit

    regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.

    Apple macOS macOS
  • Unscored —
    CVE-2020-8947 Public exploit EPSS 22%

    functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell meta…

  • Unscored —
    CVE-2013-2637 Public exploit

    A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 …

  • Unscored —
    CVE-2013-6236 Public exploit EPSS 10%

    IZON IP 2.0.2: hard-coded password vulnerability

  • Unscored —
    CVE-2013-2097 Public exploit EPSS 26%

    ZPanel through 10.1.0 has Remote Command Execution

    ZPanel Project ZPanel
  • Unscored —
    CVE-2013-1938 Public exploit

    Zimbra 2013 has XSS in aspell.php

    Zimbra Zimbra
  • Unscored —
    CVE-2013-1410 Public exploit

    Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities

  • Unscored —
    CVE-2015-7890 Public exploit

    Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung…

  • Unscored —
    CVE-2013-2010 Public exploit EPSS 74%

    WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability

    W3 Total Cache Plugin authors W3 Total Cache Plugin
  • Unscored —
    CVE-2020-8839 Public exploit

    Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.c…

  • Unscored —
    CVE-2019-19194 Public exploit

    The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before N…

  • Unscored —
    CVE-2014-2560 Public exploit

    The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, whic…

  • Critical 9.8
    CVE-2014-9390 Public exploit EPSS 76%

    JGit Improper Input Validation vulnerability

    Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up…

    git git libgit2 libgit2 Debian Ubuntu Maven PyPI
  • Unscored —
    CVE-2014-2595 Public exploit EPSS 17%

    Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a per…

  • Unscored —
    CVE-2014-4968 Public exploit

    The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 fo…