Skip to content
OpenAdvisories

Archive

February 2020

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2020-0618 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2020-8657 Exploited Public exploit Scanner template EPSS 92%

    An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in includ…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-8644 Exploited Public exploit Scanner template EPSS 86%

    PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-8515 Exploited Public exploit Scanner template EPSS 100%

    DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allo…

    KEV Nov 3, 2021