Skip to content
OpenAdvisories

Archive

9 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /9 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-8832

    Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615

    The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel …

    Ubuntu 18.04 LTS (bionic) Linux kernel linux-hwe linux-azure Linux Debian Ubuntu
  • Medium 5.8
    CVE-2019-7305

    eXtplorer exposes /usr and /etc/extplorer over HTTP

    Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this…

    Canonical eXtplorer extplorer Ubuntu
  • Medium 6.5
    CVE-2020-8834

    Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1

    KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space o…

    Linux kernel Linux kernel linux-hwe linux-riscv Linux Debian Ubuntu
  • Medium 6.4
    CVE-2020-7922

    Kubernetes Operator generates potentially insecure certificates

    X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improper access to MongoDB instances. Customers who do not use X.509 authentication, and those who do not use the Operator t…

    MongoDB MongoDB Enterprise Kubernetes Operator
  • Medium 6.5
    CVE-2018-21034

    Argo Exposure of Sensitive Information

    In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.

    github.com/argoproj/argo-cd Go
  • Medium 5.5
    CVE-2020-5263

    Information disclosure through error object

    auth0.js (NPM package auth0-js) greater than version 8.0.0 and before version 9.12.3 has a vulnerability. In the case of an (authentication) error, the error object returned by the library contains the original request of the user, which may include the plain…

    auth0 auth0.js auth0-js npm