Skip to content
OpenAdvisories

Archive

23 March 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve…

  • Critical 9.8
    CVE-2020-5722 Exploited Public exploit Scanner template EPSS 84%

    The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via craft…

    KEV Jan 28, 2022
  • Critical 9.8

    AutoUpdater.NET allows XXE

    AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.

  • Critical 9.1

    HashiCorp Vault Improper Privilege Management

    HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.