Skip to content
OpenAdvisories

Archive

February 2020

Vulnerabilities first published in this month (UTC), newest first.

← January 2020 2020 / February March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2014-9390 Public exploit EPSS 76%

    JGit Improper Input Validation vulnerability

    Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up…

    git git libgit2 libgit2 Debian Ubuntu Maven PyPI
  • Critical 9.8
    CVE-2020-0618 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

    Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2020-8840 Public exploit EPSS 27%

    Deserialization of Untrusted Data in jackson-databind

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

    jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  • Critical 9.4
    CVE-2019-17137 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…

    NETGEAR AC1200 Network devices
  • Critical 9.8
    CVE-2020-8657 Exploited Public exploit Scanner template EPSS 92%

    An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in includ…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-8644 Exploited Public exploit Scanner template EPSS 86%

    PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-8597 Public exploit EPSS 20%

    eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

    ppp lwip lwip ppp Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2020-7471 Public exploit EPSS 66%

    SQL injection in Django

    Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter).…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2020-8515 Exploited Public exploit Scanner template EPSS 100%

    DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allo…

    KEV Nov 3, 2021