Skip to content
OpenAdvisories

Archive

1 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /1 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2020-11465

    An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's priv…

  • High 7.6
    CVE-2020-11466

    An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's priv…

  • High 8.8
    CVE-2020-10199 Exploited Public exploit Scanner template EPSS 99%

    Nexus Repository Manager 3 - Remote Code Execution

    Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

    org.sonatype.nexus:nexus-extdirect Maven
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-10204 Public exploit Scanner template EPSS 38%

    Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

    Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

    org.sonatype.nexus:nexus-core Maven
  • High —
    GHSA-9q64-mpxx-87fg

    Open Redirect in ecstatic

    Versions of `ecstatic` prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an `HTTP 301` redirect to any other domains. ## Recommendation If using `ecstat…

    ecstatic npm
  • High 7.4
    CVE-2020-7065

    mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

    In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine
  • High 8.1
    CVE-2020-6096

    An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Call…

    glibc eglibc glibc Debian Ubuntu