Skip to content
OpenAdvisories

Archive

19 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /19 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-3158

    Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

    A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Critical 9.8
    CVE-2020-8441

    Deserialization of Untrusted Data in JYaml

    JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.

    org.jyaml:jyaml Maven
  • Critical 9.8
    CVE-2019-20477

    Deserialization of Untrusted Data in PyYAML

    PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

    pyyaml pyyaml Debian PyPI