Skip to content
OpenAdvisories

Archive

24 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /24 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2019-10799

    OS Command Injection in compile-sass

    compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.

    compile-sass npm
  • Critical 9.8
    CVE-2019-10796

    OS Command Injection in rpi

    rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization.

    rpi npm
  • Critical 9.8
    CVE-2020-4222 EPSS 15%

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By u…

    IBM Spectrum Protect Plus
  • Critical 9.8
    CVE-2020-4213 EPSS 15%

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By u…

    IBM Spectrum Protect Plus
  • Critical 9.8
    CVE-2020-4211 EPSS 71%

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By u…

    IBM Spectrum Protect Plus
  • Critical 9.8
    CVE-2020-4212 EPSS 15%

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By u…

    IBM Spectrum Protect Plus
  • Critical 9.8
    CVE-2020-4210 EPSS 15%

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By u…

    IBM Spectrum Protect Plus