Skip to content
OpenAdvisories

Archive

16 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /16 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7919

    Helm uses crypto package vulnerable to panic from malformed X.509 certificate

    Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.

    go stdlib k3d golang-1.13 Ubuntu Alpine Wolfi Go
  • High 8.8
    CVE-2020-9471

    Umbraco CMS Authenticated File Upload

    Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

    UmbracoCms.Core NuGet
  • High 7.5
    CVE-2020-5849 Exploited Public exploit EPSS 93%

    Unraid 6.8.0 allows authentication bypass.

    KEV Nov 3, 2021
  • High 7.4
    CVE-2019-19135

    Insufficient Nonce Validation in Eclipse Milo Client

    In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the net…

    org.eclipse.milo:sdk-client Maven
  • High 7.5
    CVE-2020-6988

    Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Con…

  • High 7.4
    CVE-2019-14887

    A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly c…

    Red Hat wildfly
  • High 7.5
    CVE-2019-19209

    Dolibarr ERP and CRM SQLi

    Dolibarr ERP/CRM before 10.0.3 allows SQL Injection.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.4
    CVE-2019-10091

    Apache Geode SSL endpoint verification vulnerability

    When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname verification of the entries in the certificate SAN during the SSL handshake. This could compromise intra-cluster communication using a man-in-the-…

    org.apache.geode:geode-core Maven