Skip to content
OpenAdvisories

Archive

6 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /6 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2020-5327

    Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerab…

    Dell Dell Encryption Enterprise
  • High 7.5
    CVE-2020-7212

    Uncontrolled Resource Consumption in urllib3

    The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. …

    urllib3 python-urllib3 Debian PyPI
  • High —
    GHSA-p94w-42g3-f7h4

    Holder can (re)create authentic credentials after receiving a credential in vp-toolkit

    ### Impact The [`verifyVerifiableCredential()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-credential-signer.ts#L57) method check the cryptographic integrity of the Verifiable Credential, but it does not check…

    vp-toolkit npm
  • High —
    GHSA-ff5x-w9wg-h275

    Holder can generate proof of ownership for credentials it does not control in vp-toolkit

    ### Impact The [`verifyVerifiablePresentation()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-presentation-signer.ts#L97) method check the cryptographic integrity of the Verifiable Presentation, but it does not…

    vp-toolkit npm