Skip to content
OpenAdvisories

Archive

19 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /19 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.5
    CVE-2019-16108

    phpBB arbitrary CSS injection

    phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode.

    phpbb/phpbb Packagist
  • High 7.4
    CVE-2019-20521

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI.

  • High 7.4
    CVE-2019-20520

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI.

  • High 7.4
    CVE-2019-20519

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address.

  • High 7.4
    CVE-2019-20518

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI.

  • High 7.4
    CVE-2019-20517

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI.

  • High 7.4
    CVE-2019-20516

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI.

  • High 7.4
    CVE-2019-20515

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI.

  • High 7.4
    CVE-2019-20514

    ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI.

  • High 7.7
    CVE-2020-5262

    GitHub personal access token leaking into temporary EasyBuild (debug) logs

    In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, …

    easybuilders easybuild-framework easybuild easybuild-framework PyPI
  • High 7.1
    CVE-2020-3264

    Cisco SD-WAN Solution Buffer Overflow Vulnerability

    A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending…

    Cisco Cisco SD-WAN Solution Network devices
  • High 7.0
    CVE-2020-3265

    Cisco SD-WAN Solution Privilege Escalation Vulnerability

    A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerab…

    Cisco Cisco SD-WAN Solution Network devices
  • High 7.8
    CVE-2020-3266

    Cisco SD-WAN Solution Command Injection Vulnerability

    A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit…

    Cisco Cisco SD-WAN Solution Network devices
  • High 7.0
    CVE-2020-1705

    A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an …

    Red Hat openshift/template-service-broker-operator
  • High 7.5
    CVE-2020-10675

    Infinite Loop in jsonparser

    The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.

    github.com/buger/jsonparser golang-github-buger-jsonparser golang-github-buger-jsonparser Debian Ubuntu Go