Skip to content
OpenAdvisories

Archive

26 March 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2020-9467 Public exploit EPSS 24%

    Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

  • High 7.5
    CVE-2020-4276 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…

  • High 8.6
    CVE-2020-1764 Public exploit

    Hard coded cryptographic key in Kiali

    A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possib…