Skip to content
OpenAdvisories

Archive

11 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /11 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.6
    CVE-2020-7598 Public exploit

    Prototype Pollution in minimist

    minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

    js-jquery nodejs-nodemon minimist node-minimist Debian Ubuntu Azure Linux npm
  • Medium 5.3
    CVE-2016-1000111

    Forced Browsing in Twisted

    Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers…

    twisted twisted twisted py3-twisted Debian Ubuntu Alpine PyPI
  • Medium 5.0
    CVE-2020-1733

    Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File

    A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp.…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI
  • Medium 5.9
    CVE-2011-2487

    Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

    The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

    Red Hat Apache JBossWS WSS4J Maven
  • Medium 6.5
    CVE-2019-9102

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB366…

  • Medium 6.2
    CVE-2019-9095

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB366…

  • Medium 5.3
    CVE-2019-9103

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB366…

  • Medium 4.3
    CVE-2019-16107

    phpBB Cross-Site Request Forgery (CSRF)

    Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.

    phpbb/phpbb Packagist