Skip to content
OpenAdvisories

Archive

24 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /24 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2019-18183

    pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. Th…

    pacman Alpine
  • Medium 4.6
    CVE-2019-20480

    In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a maliciou…

  • Medium 4.6
    CVE-2019-20481

    In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old passw…

  • Medium 5.4
    CVE-2020-5186

    DNN XSS Vulnerability

    DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).

    DotNetNuke.Core NuGet
  • High 8.8
    CVE-2020-5187

    DNN Path Traversal via Zip Slip

    DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).

    DotNetNuke.Core NuGet
  • Medium 6.5
    CVE-2020-5188

    DNN File Upload Vulnerability

    DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2015-9542

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is…

    libpam-radius-auth libpam-radius-auth Debian Ubuntu
  • Unscored —
    CVE-2019-20044

    In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh …

    zsh zsh zsh Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-15299

    An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the cont…

  • High 8.0
    CVE-2019-3670

    Remote Code Execution vulnerability

    Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.

    McAfee Web Advisor (WA)