Skip to content
OpenAdvisories

Archive

1 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /1 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-1958 Public exploit

    Credentials bypass in Apache Druid

    When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. Th…

    Apache Apache Druid org.apache.druid:druid Maven
  • Medium —
    CVE-2019-17564 Public exploit Scanner template EPSS 37%

    Deserialization of Untrusted Data in Apache Dubbo

    Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue af…

    Apache Apache Dubbo org.apache.dubbo:dubbo-rpc-http-invoker Maven
  • High 8.8
    CVE-2020-10199 Exploited Public exploit Scanner template EPSS 99%

    Nexus Repository Manager 3 - Remote Code Execution

    Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

    org.sonatype.nexus:nexus-extdirect Maven
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-10204 Public exploit Scanner template EPSS 38%

    Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

    Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

    org.sonatype.nexus:nexus-core Maven
  • Unscored —
    CVE-2020-11455 Public exploit Scanner template EPSS 97%

    LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFile…

  • Unscored —
    CVE-2020-11456 Public exploit EPSS 71%

    LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicat…

  • Unscored —
    CVE-2020-11457 Public exploit

    pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full …