Skip to content
OpenAdvisories

Archive

26 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /26 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.2
    CVE-2020-3166

    Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this …

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 6.7
    CVE-2020-3169

    Cisco FXOS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficien…

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 5.3
    CVE-2020-3170

    Cisco NX-OS Software NX-API Denial of Service Vulnerability

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is s…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • Medium 4.7
    CVE-2020-3174

    Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability

    A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • Medium 6.3
    CVE-2019-4598

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker …

    IBM Sterling B2B Integrator
  • Medium 4.3
    CVE-2019-4726

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which …

    IBM Sterling B2B Integrator
  • Medium 6.3
    CVE-2019-4597

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker …

    IBM Sterling B2B Integrator
  • Medium 5.4
    CVE-2019-4596

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulner…

    IBM Sterling B2B Integrator
  • Medium 5.3
    CVE-2019-4537

    IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could…

    IBM WebSphere Service Registry and Repository