Skip to content
OpenAdvisories

Archive

25 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /25 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2015-0565 Public exploit EPSS 14%

    NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

    NaCl NaCL nacl Debian
  • Unscored —
    CVE-2020-8809 Public exploit

    Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connec…

  • Unscored —
    CVE-2019-3999 Public exploit

    Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, …

    Windows
  • Unscored —
    CVE-2020-9008 Public exploit

    Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary we…

  • Unscored —
    CVE-2020-8794 Public exploit EPSS 89%

    OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for mul…

    opensmtpd opensmtpd opensmtpd-extras Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-8793 Public exploit

    OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a comb…

    opensmtpd opensmtpd Debian Ubuntu
  • High 8.1
    CVE-2020-8819 Public exploit

    CardGate Payments plugin for WooCommerce does not validate request origin

    An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID…

    cardgate/woocommerce Packagist