Skip to content
OpenAdvisories

Archive

20 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /20 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.8
    CVE-2020-8880 EPSS 11%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 7.8
    CVE-2020-8882 EPSS 11%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 7.8
    CVE-2020-8881 EPSS 11%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 7.8
    CVE-2020-8878 EPSS 11%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 8.1
    CVE-2020-8134

    Server-side request forgery in Ghost CMS

    Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.

    ghost npm
  • High —
    CVE-2020-8135

    Server-Side Request Forgery in @uppy/companion

    The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.

    @uppy/companion npm
  • High 7.5
    CVE-2020-8136

    Uncontrolled Resource Consumption in fastify-multipart

    Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

    fastify-multipart npm
  • High 7.0
    CVE-2019-19345

    A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification …

    [UNKNOWN] openshift/mediawiki-apb Web / CMS
  • High 7.2
    CVE-2019-19029

    SQL Injection in Cloud Native Computing Foundation Harbor

    Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.

    github.com/goharbor/harbor Go
  • High 7.6
    CVE-2019-19025

    Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

    Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

    github.com/goharbor/harbor Go
  • High 7.0
    CVE-2020-1709

    A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vuln…

    [UNKNOWN] openshift/mediawiki Web / CMS
  • High 7.0
    CVE-2020-1707

    A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification…

    [UNKNOWN] openshift/postgresql-apb