Skip to content
OpenAdvisories

Archive

18 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /18 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-7796 Exploited Scanner template EPSS 94%

    Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is ena…

    KEV Feb 17, 2026
  • Critical 9.3
    CVE-2020-9265

    phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demo…

  • Critical 9.8
    CVE-2019-10791

    promise-probe OS command injection vulnerability

    promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization.

    snyk promise-probe promise-probe npm
  • Critical 9.8
    CVE-2014-4967

    Ansible Arbitrary Code Execution

    Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2…

    ansible ansible ansible Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2014-4966

    Ansible Arbitrary Code Execution

    Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 d…

    ansible ansible ansible Debian Ubuntu PyPI