Skip to content
OpenAdvisories

Archive

30 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /30 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2019-9507

    The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution

    The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands within the web application are executed as root, this could a…

    Vertiv Avocent UMG-4000
  • High 7.6
    CVE-2020-5275

    Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http

    In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides to grant access on the attribute, preventing the check of ne…

    symfony symfony symfony/symfony symfony Debian Packagist
  • High 7.5
    CVE-2019-17561

    Improper Verification of Cryptographic Signature in Apache Netbeans

    The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.

    netbeans netbeans org.codehaus.mevenide:netbeans Debian Ubuntu Maven