Skip to content
OpenAdvisories

Archive

23 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /23 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-10879 Public exploit EPSS 84%

    rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the no…

  • Medium 6.3
    CVE-2020-8865 Public exploit

    This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webm…

    horde Groupware Webmail Edition php-horde-trean php-horde-trean Debian Ubuntu
  • Medium 4.3
    CVE-2020-8866 Public exploit

    This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webma…

    horde Groupware Webmail Edition php-horde-form php-horde-form Debian Ubuntu
  • Critical 9.8
    CVE-2020-5722 Exploited Public exploit Scanner template EPSS 84%

    The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via craft…

    KEV Jan 28, 2022
  • High 8.3
    CVE-2020-6650 Public exploit

    Arbitrary code execution through “Update Manager” Class

    UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software …

    Eaton UPS Companion software