Skip to content
OpenAdvisories

Archive

11 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /11 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1947 Public exploit EPSS 34%

    Deserialization of Untrusted Data in Apache ShardingSphere

    In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalli…

    Apache Software Foundation Apache ShardingSphere(incubator) org.apache.shardingsphere:shardingsphere Maven
  • Critical 9.9
    CVE-2020-9408

    TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability

    The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Scr…

    TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace TIBCO Spotfire Server
  • Critical 9.8
    CVE-2020-10181 Exploited EPSS 15%

    goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevat…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-9104

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB366…

  • Critical 9.8
    CVE-2019-9096

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB366…

  • Critical 9.8
    CVE-2020-5203

    Fat-Free Framework arbitrary code execution

    In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.

    bcosca/fatfree Packagist