Skip to content
OpenAdvisories

Archive

20 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /20 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-10799

    SVGlib Vulnerable to XXE Attacks

    The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.

    svglib PyPI
  • Critical 9.8
    CVE-2020-8137

    Code injection in blamer

    Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

    blamer npm
  • Critical 9.8
    CVE-2020-7961 Exploited Public exploit Scanner template EPSS 100%

    Deserialization of Untrusted Data in Liferay Portal

    Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

    com.liferay.portal:com.liferay.portal.kernel Maven
    KEV Nov 3, 2021
  • Critical 9.3
    CVE-2019-19023

    Privilege Escalation in Cloud Native Computing Foundation Harbor

    Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.

    github.com/goharbor/harbor Go