Skip to content
OpenAdvisories

Archive

17 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /17 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-19325

    Reflected XSS in SilverStripe

    SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML or JavaScript to be inserted through non-scalar FormField attributes, which allows performing XSS (…

    silverstripe/framework Packagist
  • Medium 4.3
    CVE-2019-20474

    An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configura…

  • Medium 5.4
    CVE-2020-9038 Public exploit

    Cross-site Scripting in Joplin

    Joplin through 1.0.184 allows Arbitrary File Read via XSS.

    joplin npm
  • Medium 4.2
    CVE-2020-7252

    Unquoted service executable path

    Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

    McAfee Data Exchange Layer (DXL) Broker