Skip to content
OpenAdvisories

Archive

20 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /20 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2020-9015 Public exploit EPSS 16%

    Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly ot…

  • Unscored —
    CVE-2012-3351 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attacker…

  • Unscored —
    CVE-2014-4019 Public exploit EPSS 13%

    ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficien…

  • Unscored —
    CVE-2014-4650 Public exploit EPSS 24%

    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path…

    python3.4 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2014-7951 Public exploit

    Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate at…

  • Unscored —
    CVE-2020-9273 Public exploit EPSS 12%

    In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a …

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
  • Unscored —
    CVE-2012-2629 Public exploit

    Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier al…

  • High 7.5
    CVE-2020-9283 Public exploit EPSS 21%

    Improper Verification of Cryptographic Signature in golang.org/x/crypto

    golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.

    k3d k3d-proxy k3d-tools golang.org/x/crypto Debian Ubuntu Wolfi Go