Skip to content
OpenAdvisories

Archive

11 March 2020

Vulnerabilities first published on this day (UTC), newest first.

45 results · Feed

  • Unscored —

    Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for a…

  • Critical 9.8

    Fat-Free Framework arbitrary code execution

    In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.

  • Unscored —

    oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Refl…

  • Medium 4.3

    phpBB Cross-Site Request Forgery (CSRF)

    Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.

  • Unscored —
    CVE-2020-10385 Public exploit

    A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1…