Skip to content
OpenAdvisories

Archive

20 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /20 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Unscored —
    CVE-2012-5365

    The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to caus…

  • Unscored —
    CVE-2012-5364 EPSS 15%

    The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a f…

  • Unscored —
    CVE-2012-5366

    The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a …

  • Unscored —
    CVE-2020-9308

    archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupt…

    libarchive libarchive Debian Alpine
  • Unscored —
    CVE-2011-2498

    The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consu…

    Linux
  • Unscored —
    CVE-2012-2629 Public exploit

    Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier al…

  • Unscored —
    CVE-2014-3484

    Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2…

    musl musl Debian Ubuntu
  • Unscored —
    CVE-2015-2923

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers t…

  • Critical 9.8
    CVE-2014-4678

    Ansible Code Injection Vulnerability

    The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.

    ansible ansible ansible Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2014-4660

    Ansible discloses credential information

    Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file …

    ansible ansible ansible Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-3182

    The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of se…

    openjpeg2 Debian
  • High 7.5
    CVE-2020-9283 Public exploit EPSS 21%

    Improper Verification of Cryptographic Signature in golang.org/x/crypto

    golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.

    k3d k3d-proxy k3d-tools golang.org/x/crypto Debian Ubuntu Wolfi Go
  • Unscored —
    CVE-2019-20479

    A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backs…

    libapache2-mod-auth-openidc Debian