Skip to content
OpenAdvisories

Archive

28 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /28 March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2020-6804

    XSS in Mozilla WebThings Gateway

    A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

    Mozilla WebThings Gateway
  • High 7.5
    CVE-2019-7007

    Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability

    A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on th…

    Avaya Equinox Conferencing Management (iView)
  • High 7.5
    CVE-2019-10805

    Exposure of Resource to Wrong Sphere in valib

    valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is p…

    valib npm
  • High 8.6
    CVE-2018-21035

    In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits ca…

    qt5-qtsvg qtwebsockets-opensource-src qtwebsockets-opensource-src Debian Ubuntu Azure Linux