Skip to content
OpenAdvisories

Archive

12 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /12 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • High 7.8
    CVE-2020-11725

    snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later af…

    linux Debian
  • Unscored —
    CVE-2020-11724

    An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demon…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2020-11722

    Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua byte…

    crawl crawl Debian Ubuntu
  • Unscored —
    CVE-2020-11721

    load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, w…

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2020-11714

    eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.

  • Unscored —
    CVE-2020-11713

    wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.

    wolfssl wolfssl Debian Ubuntu
  • Unscored —
    CVE-2020-11712

    Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.

  • Unscored —
    CVE-2020-11710 Scanner template EPSS 33%

    An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces oth…

  • Unscored —
    CVE-2020-11709

    cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, whi…

    qtwebengine-opensource-src Ubuntu
  • Unscored —
    CVE-2020-11701

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demons…

  • Unscored —
    CVE-2020-11702

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and R…

  • Unscored —
    CVE-2020-11703

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Respons…

  • Unscored —
    CVE-2020-11704

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and …

  • Unscored —
    CVE-2020-11705

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to lo…

  • Unscored —
    CVE-2020-11706

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such…

  • Unscored —
    CVE-2020-11707

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symli…

  • Unscored —
    CVE-2020-11708

    An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/Set…