Skip to content
OpenAdvisories

Archive

23 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /23 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 5.0
    CVE-2020-5252

    Malicious package may avoid detection in python auditing

    The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-s…

    pyupio safety safety PyPI
  • Medium 5.3
    CVE-2020-8859

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG El…

    ELOG Electronic Logbook elog Ubuntu
  • Medium 6.3
    CVE-2020-8865 Public exploit

    This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webm…

    horde Groupware Webmail Edition php-horde-trean php-horde-trean Debian Ubuntu
  • Medium 4.3
    CVE-2020-8866 Public exploit

    This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webma…

    horde Groupware Webmail Edition php-horde-form php-horde-form Debian Ubuntu
  • Medium 5.5
    CVE-2020-10870

    Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim'…

    zim zim Debian Ubuntu
  • Medium 6.5
    CVE-2020-8876

    This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2…

    Parallels Desktop
  • Medium 6.0
    CVE-2020-8872

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

    Parallels Desktop
  • Medium 4.6
    CVE-2020-9759

    webOS TV Emulator privilege escalation vulnerability

    A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration …

    weechat weechat Debian Ubuntu
  • Medium 5.4
    CVE-2019-4718

    IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

    IBM Jazz for Service Management
  • Medium 5.5
    CVE-2020-1951

    Infinite Loop in Apache Tika

    A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

    tika tika org.apache.tika:tika Debian Ubuntu Maven
  • Medium 5.5
    CVE-2020-1950

    Uncontrolled Resource Consumption in Apache Tika

    A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

    Apache Apache Tika tika tika Debian Ubuntu Maven
  • Medium 5.3
    CVE-2020-10660

    HashiCorp Vault Improper Privilege Management

    HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.

    github.com/hashicorp/vault Go