Skip to content
OpenAdvisories

Archive

19 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /19 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-15539

    MantisBT XSS when uploading an attachment

    The proj_doc_edit_page.php Project Documentation feature in MantisBT before 2.21.3 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploading an attachment with a crafted filename. T…

    mantisbt/mantisbt Packagist
  • Medium 6.1
    CVE-2019-20526

    Ignite Realtime Openfire allows Cross-site Scripting

    Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.

    org.igniterealtime.openfire:parent Maven
  • Medium 6.1
    CVE-2019-20525

    Ignite Realtime Openfire allows Cross-site Scripting

    Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.

    org.igniterealtime.openfire:parent Maven
  • Medium 4.0
    CVE-2020-5267 Public exploit

    Possible XSS vulnerability in ActionView

    In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions…

    rails actionview rails rails Debian Ubuntu RubyGems
  • Medium 5.5
    CVE-2019-16010

    Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the vManage software. The vulnerability is …

    Cisco Cisco vManage Software Network devices
  • Medium 5.4
    CVE-2019-16012 EPSS 54%

    Cisco SD-WAN Solution vManage SQL Injection Vulnerability

    A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values. An attac…

    Cisco Cisco vManage Software Network devices
  • Medium 6.5
    CVE-2019-14876

    In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Ball…

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.5
    CVE-2019-14875

    In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Ba…

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.5
    CVE-2019-14874

    In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc …

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.5
    CVE-2019-14878

    In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc …

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.5
    CVE-2019-14877

    In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Ballo…

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.5
    CVE-2019-14873

    In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc …

    Red Hat newlib newlib newlib Debian Ubuntu
  • Medium 6.1
    CVE-2019-12416

    Injection in DeltaSpike

    we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.

    org.apache.deltaspike:deltaspike Maven
  • Medium 6.1
    CVE-2019-20527

    Ignite Realtime Openfire allows Cross-site Scripting

    Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.

    org.igniterealtime.openfire:parent Maven
  • Medium 5.0
    CVE-2020-4205

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, …

    IBM DataPower Gateway
  • Medium 4.9
    CVE-2020-4203

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privil…

    IBM DataPower Gateway
  • Medium 5.4
    CVE-2019-19336

    A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3…

    Red Hat ovirt-engine
  • Medium 6.5
    CVE-2019-14872

    The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without c…

    Red Hat newlib newlib newlib Debian Ubuntu