Skip to content
OpenAdvisories

Archive

13 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /13 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2013-4791

    PrestaShop Stored Cross-Site Scripting Vulnerability

    PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.

    prestashop/prestashop Packagist
  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm