Skip to content
OpenAdvisories

Archive

24 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /24 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-6816

    Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag

    In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.

    bleach python-bleach python-bleach py3-bleach Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2020-6802

    XSS in Bleach when noscript and raw tag whitelisted

    In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

    bleach python-bleach python-bleach py3-bleach Debian Ubuntu Alpine PyPI
  • Medium 4.3
    CVE-2020-4309

    IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid …

    IBM Content Navigator
  • Medium 6.3
    CVE-2020-4253

    IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to imperso…

    IBM Content Navigator
  • Medium 6.1
    CVE-2019-4681

    IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows use…

    IBM Tivoli Netcool Impact
  • Medium 5.9
    CVE-2019-4553

    IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an at…

    IBM API Connect
  • Medium 5.6
    CVE-2020-1744

    Exposure of Sensitive Information in keycloak

    A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the brute force protection event queue. So BruteForceProtector do…

    Red Hat keycloak org.keycloak:keycloak-core Maven