Skip to content
OpenAdvisories

Archive

27 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /27 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-7063

    Files added to tar with Phar::buildFromIterator have all-access permissions

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesys…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7061

    heap-buffer-overflow in phar_extract_file

    In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosur…

    PHP Group PHP php7 Alpine
  • Medium 5.3
    CVE-2020-5401

    Cloud Foundry GoRouter is vulnerable to cache poisoning

    Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

    Cloud Foundry Routing
  • Medium —
    CVE-2015-2992

    Cross-site Scripting in Apache Struts

    Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Medium 6.3
    CVE-2019-4669

    IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Autom…

    IBM Business Automation Workflow Business Process Manager
  • Medium 6.4
    CVE-2020-3924

    TONNET DVR – Firmware Injection

    DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

    TONNET DVR