Skip to content
OpenAdvisories

Archive

17 February 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-7236 Public exploit EPSS 56%

    Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2014-1947 Public exploit

    Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remot…

  • Unscored —
    CVE-2015-6922 Public exploit EPSS 82%

    Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before…

  • Medium 5.4
    CVE-2020-9038 Public exploit

    Cross-site Scripting in Joplin

    Joplin through 1.0.184 allows Arbitrary File Read via XSS.

  • Unscored —
    CVE-2020-8518 Public exploit EPSS 72%

    Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code exec…

  • Unscored —
    CVE-2020-9006 Public exploit

    The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in the sgImportPopups func…