Skip to content
OpenAdvisories

Archive

23 March 2020

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • High 8.8
    CVE-2020-8864 EPSS 82%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-8…

  • High 8.8
    CVE-2020-8863 EPSS 78%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-8…

  • High 7.5

    A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module…

  • High 8.2

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-…

  • High 8.8

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-…

  • High 7.5

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-…

  • High 8.2

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-…

  • High 7.3

    An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permis…

  • High 8.8

    CodeIgniter Improper Privilege Management

    CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page. NOTE: A contributor to the CodeIgniter framework argues that the issue should not be attributed to CodeIgniter. Furthermore, th…

  • High 8.3
    CVE-2020-6650 Public exploit

    Arbitrary code execution through “Update Manager” Class

    UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software …