Skip to content
OpenAdvisories

Archive

5 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /5 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-5405 Public exploit Scanner template EPSS 69%

    Directory Traversal with spring-cloud-config-server

    Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send …

    Spring by VMware Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • High 7.6
    CVE-2020-5250 Public exploit

    Possible information disclosure in PrestaShop

    In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all inform…

    PrestaShop PrestaShop Web / CMS
  • Unscored —
    CVE-2019-20499 Public exploit EPSS 95%

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Confi…

  • High 7.8
    CVE-2019-20500 Exploited Public exploit EPSS 97%

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configur…

    KEV Jun 29, 2023
  • Unscored —
    CVE-2020-10173 Public exploit EPSS 77%

    Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilit…

  • Unscored —
    CVE-2019-20501 Public exploit EPSS 90%

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmw…

  • Unscored —
    CVE-2020-9380 Public exploit

    IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.

  • Unscored —
    CVE-2019-14079 Public exploit

    Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped …

    Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables