Skip to content
OpenAdvisories

Archive

February 2020

Vulnerabilities first published in this month (UTC), newest first.

← January 2020 2020 / February March 2020 →
  1. 11
  2. 23
  3. 336
  4. 474
  5. 566
  6. 672
  7. 768
  8. 821
  9. 9 
  10. 1058
  11. 11210
  12. 12117
  13. 13123
  14. 1434
  15. 151
  16. 167
  17. 1763
  18. 1854
  19. 1962
  20. 2053
  21. 2126
  22. 2211
  23. 236
  24. 2450
  25. 2540
  26. 2633
  27. 2778
  28. 2839
  29. 29 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-1937 Public exploit

    SQL Injection in Kylin

    Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

    Apache Apache Kylin org.apache.kylin:kylin-server-base Maven
  • Medium 6.5
    CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • Medium 5.4
    CVE-2020-9038 Public exploit

    Cross-site Scripting in Joplin

    Joplin through 1.0.184 allows Arbitrary File Read via XSS.

    joplin npm
  • Medium 5.4
    CVE-2019-15253 Public exploit

    Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface o…

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices
  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…

    Pylons Waitress waitress PyPI