Skip to content
OpenAdvisories

Archive

14 February 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8

    Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport

    An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

  • Critical 9.8

    Code Injection in script-manager

    An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.

  • Critical 9.8

    An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library o…

  • Critical 9.8

    An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGe…