Skip to content
OpenAdvisories

Archive

26 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /26 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2019-18238

    In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower,…

  • Unscored —
    CVE-2019-17275

    OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.

    NETAPP OnCommand Cloud Manager
  • Unscored —
    CVE-2019-17274

    NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shi…

    NETAPP NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller
  • Medium 4.2
    CVE-2020-3166

    Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this …

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • High 7.8
    CVE-2020-3167

    Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.5
    CVE-2020-3168

    Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

    A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module (VSM) to become inaccessible to users through…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.7
    CVE-2020-3169

    Cisco FXOS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficien…

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 5.3
    CVE-2020-3170

    Cisco NX-OS Software NX-API Denial of Service Vulnerability

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is s…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • High 7.8
    CVE-2020-3171

    Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

    A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulner…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.8
    CVE-2020-3172

    Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 7.8
    CVE-2020-3173

    Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability

    A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected device. The vulnerability is due to insuff…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • Medium 4.7
    CVE-2020-3174

    Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability

    A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • High 8.6
    CVE-2020-3175

    Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability

    A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due …

    Cisco Cisco NX-OS Software 5.0(1a) Network devices
  • High 8.2
    CVE-2020-3165

    Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability

    A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass MD5 authentication and establish a BGP connection with the device. T…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.3
    CVE-2019-4598

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker …

    IBM Sterling B2B Integrator
  • Medium 4.3
    CVE-2019-4726

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which …

    IBM Sterling B2B Integrator
  • Medium 6.3
    CVE-2019-4597

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker …

    IBM Sterling B2B Integrator
  • Medium 5.4
    CVE-2019-4596

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulner…

    IBM Sterling B2B Integrator
  • Medium 5.3
    CVE-2019-4537

    IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could…

    IBM WebSphere Service Registry and Repository
  • Unscored —
    CVE-2020-9274 Scanner template

    An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases…

    pure-ftpd pure-ftpd pure-ftpd Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-8951

    Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the …

  • Unscored —
    CVE-2020-8952

    Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.

  • Unscored —
    CVE-2019-19986

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication …

  • Unscored —
    CVE-2019-19987

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forger…

  • Unscored —
    CVE-2019-19988

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is ab…

  • Unscored —
    CVE-2019-19989

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type o…

  • Unscored —
    CVE-2019-19990

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scriptin…

  • Unscored —
    CVE-2019-19991

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scrip…

  • Unscored —
    CVE-2019-19992

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is ab…

  • Unscored —
    CVE-2019-19993

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulner…

  • Unscored —
    CVE-2019-19994

    An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. …

  • Unscored —
    CVE-2019-19134 Scanner template

    The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/inde…

  • Unscored —
    CVE-2020-9337

    In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.