Skip to content
OpenAdvisories

Archive

19 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /19 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.4
    CVE-2019-1950

    Cisco IOS XE SD-WAN Software Default Credentials Vulnerability

    A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected …

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices
  • High 8.8
    CVE-2020-3112

    Cisco Data Center Network Manager Privilege Escalation Vulnerability

    A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could …

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.8
    CVE-2020-3114

    Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insuffic…

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.0
    CVE-2020-6061

    An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. …

    coturn coturn Debian Ubuntu
  • High 8.0
    CVE-2019-17333

    TIBCO EBX Exposes Cross-Site Scripting Vulnerability

    The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS…

    TIBCO Software TIBCO EBX
  • High 8.8
    CVE-2019-12437

    Silverstripe CSRF Protection Bypass via GraphQL

    In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,

    silverstripe/graphql Packagist
  • High 8.4
    CVE-2020-4204

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a bu…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2020-4135

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauth…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2012-6685

    Nokogiri is vulnerable to XML External Entity (XXE) attack

    Nokogiri before 1.5.4 is vulnerable to XXE attacks

    nokogiri ruby-nokogiri Debian RubyGems