Skip to content
OpenAdvisories

Archive

6 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /6 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2020-8634

    Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file m…

  • Unscored —
    CVE-2020-8635 Public exploit

    Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configur…

  • Unscored —
    CVE-2020-10212

    upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blockin…

  • Unscored —
    CVE-2019-19772

    Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affect…

  • Unscored —
    CVE-2019-19773

    Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected …

  • Unscored —
    CVE-2020-10112

    Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By defau…

  • Unscored —
    CVE-2020-10111

    Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the repo…

  • Unscored —
    CVE-2020-10110

    Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vu…

  • Critical 9.8
    CVE-2020-5328

    Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough au…

    Dell Isilon OneFS
  • High 8.1
    CVE-2020-5327

    Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerab…

    Dell Dell Encryption Enterprise
  • Unscored —
    CVE-2020-10193

    ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an arc…

  • High 7.5
    CVE-2020-7212

    Uncontrolled Resource Consumption in urllib3

    The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. …

    urllib3 python-urllib3 Debian PyPI
  • Unscored —
    CVE-2020-9458

    In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (w…

  • Unscored —
    CVE-2020-9457

    The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) …

  • Unscored —
    CVE-2020-9456

    In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (w…

  • Unscored —
    CVE-2020-9455

    The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) …

  • Unscored —
    CVE-2020-9454

    A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge req…

  • Unscored —
    CVE-2020-8113

    GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.

  • Unscored —
    CVE-2020-9531

    An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), …

  • Unscored —
    CVE-2020-9530

    An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) m…

  • Critical 9.8
    CVE-2020-10189 Exploited Public exploit Scanner template EPSS 100%

    Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted …

    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-9756

    Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050…

  • Unscored —
    CVE-2020-10188 EPSS 74%

    utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes o…

    inetutils inetutils netkit-telnet-ssl netkit-telnet-ssl Debian Ubuntu
  • High —
    GHSA-p94w-42g3-f7h4

    Holder can (re)create authentic credentials after receiving a credential in vp-toolkit

    ### Impact The [`verifyVerifiableCredential()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-credential-signer.ts#L57) method check the cryptographic integrity of the Verifiable Credential, but it does not check…

    vp-toolkit npm
  • High —
    GHSA-ff5x-w9wg-h275

    Holder can generate proof of ownership for credentials it does not control in vp-toolkit

    ### Impact The [`verifyVerifiablePresentation()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-presentation-signer.ts#L97) method check the cryptographic integrity of the Verifiable Presentation, but it does not…

    vp-toolkit npm
  • Unscored —
    CVE-2019-20503

    usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

    chromium chromium-browser thunderbird firefox Debian Ubuntu Azure Linux Alpine