Skip to content
OpenAdvisories

Archive

4 March 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-9054 Exploited Public exploit Scanner template EPSS 100%

    ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

    Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2020-9372 Public exploit

    The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or…

  • Unscored —
    CVE-2020-9371 Public exploit

    Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php…