Skip to content
OpenAdvisories

Archive

22 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /22 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2020-10818

    Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the…

  • Unscored —
    CVE-2020-10819 EPSS 71%

    Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.

  • Unscored —
    CVE-2020-10820 EPSS 19%

    Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.

  • Unscored —
    CVE-2020-10821 EPSS 71%

    Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.

  • Unscored —
    CVE-2020-10809

    An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() locate…

    hdf5 hdf5 Debian Ubuntu
  • Unscored —
    CVE-2020-10810

    An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() lo…

    hdf5 hdf5 Debian Ubuntu
  • Unscored —
    CVE-2020-10811

    An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode…

    hdf5 hdf5 hdf5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-10812

    An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() locat…

    hdf5 hdf5 Debian Ubuntu
  • Unscored —
    CVE-2020-10808 Public exploit EPSS 78%

    Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint…

  • Unscored —
    CVE-2020-10807

    auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string i…

  • Critical 9.8
    CVE-2020-10806

    eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type

    eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost…

    ezsystems/ezpublish-kernel ezsystems/ezpublish-legacy Packagist
  • High 8.0
    CVE-2020-10802

    phpMyAdmin SQL injection vulnerability

    In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchContr…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Medium 5.4
    CVE-2020-10803

    phpMyAdmin SQL injection vulnerability

    In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results (in tbl_get_field.php and libraries/classes/Display/Results…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • High 8.0
    CVE-2020-10804

    phpMyAdmin SQL Injection

    In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). A malicious user with access to the server c…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist