Skip to content
OpenAdvisories

Archive

13 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /13 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2020-5240

    2FA bypass through deleting devices in wagtail-2fa

    In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not require special permissions in order to do so. By deleting the other users device they can disable the tar…

    Lab Digital wagtail-2fa wagtail-2fa PyPI
  • High 7.7
    CVE-2020-5257

    Sort order SQL injection in Administrate

    In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the `dir…

    thoughtbot administrate administrate RubyGems
  • High 7.9
    CVE-2019-19756

    An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to p…

    Lenovo XClarity Administrator (LXCA)