Skip to content
OpenAdvisories

Archive

16 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /16 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-7608

    yargs-parser Vulnerable to Prototype Pollution

    yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.

    yargs-parser node-yargs-parser node-yargs-parser Debian Ubuntu npm
  • Medium 6.5
    CVE-2020-9472

    Unrestricted Upload of File with Dangerous Type in Umbraco CMS

    Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

    UmbracoCms NuGet
  • Medium 5.3
    CVE-2020-9321

    Traefik has an Improper Certificate Handling issue

    configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

    github.com/traefik/traefik github.com/containous/traefik/v2 github.com/containous/traefik Go
  • Medium 6.5
    CVE-2019-4656

    IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack tha…

    IBM MQ
  • Medium 5.1
    CVE-2019-4719

    IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitiv…

    IBM MQ
  • Medium 5.1
    CVE-2019-4619

    IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitiv…

    IBM MQ
  • Medium 5.9
    CVE-2019-4617

    IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could le…

    IBM Cloud Automation Manager
  • Medium 4.2
    CVE-2020-1735

    Path Traversal in Ansible

    A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be …

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2019-19211

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 5.4
    CVE-2019-19210

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 6.1
    CVE-2018-10125

    Cross-site Scripting in Contao

    Contao before 4.5.7 has XSS in the system log.

    contao/core-bundle contao/contao contao/core Packagist
  • Medium 5.0
    CVE-2020-1753

    Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

    A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as pass…

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI