Skip to content
OpenAdvisories

Archive

16 February 2020

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Medium 5.4

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.

  • Unscored —

    Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the H…

  • Unscored —

    A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows…

  • Unscored —

    Codoforum 4.8.8 allows self-XSS via the title of a new topic.

  • Unscored —

    Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an…

  • Unscored —

    Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to…

  • Unscored —

    AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadw…