Skip to content
OpenAdvisories

Archive

2 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /2 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-17572

    InfluxDB Reflected Cross-site Scripting

    InfluxDB 0.9.5 has Reflected XSS in the Write Data module.

    influxdb github.com/influxdata/influxdb Debian Go
  • Medium 5.1
    CVE-2019-18901

    mysql-systemd-helper allows setting 640 permissions of arbitrary files

    A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This i…

    SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 Linux
  • Medium 6.5
    CVE-2020-5249

    HTTP Response Splitting (Early Hints) in Puma

    In Puma (RubyGem) before 4.3.3 and 3.12.4, if an application using Puma allows untrusted input in an early-hints header, an attacker can use a carriage return character to end the header and inject malicious content, such as additional headers or an entirely …

    puma puma puma puma Debian RubyGems
  • Medium 6.8
    CVE-2020-4283

    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a …

    IBM Security Information Queue