Skip to content
OpenAdvisories

Archive

27 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /27 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2020-6418 Exploited Public exploit EPSS 79%

    Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3837 Exploited Public exploit EPSS 15%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.5
    CVE-2020-7062

    Null Pointer Dereference in PHP Session Upload Progress

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload proce…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • High 8.8
    CVE-2020-5402

    UAA fails to check the state parameter when authenticating with external IDPs

    In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity providers.

    Cloud Foundry UAA
  • High 8.0
    CVE-2020-5400

    Cloud Controller logs environment variables from app manifests

    Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unau…

    Cloud Foundry CAPI
  • High 8.1
    CVE-2020-3923

    TONNET DVR – Broken Access Control

    DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system.

    TONNET DVR