Skip to content
OpenAdvisories

Archive

17 April 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-11883 Public exploit EPSS 15%

    Diavante vue-storefront-api and storefront-api disclose stack trace

    In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

  • Unscored —
    CVE-2020-0082 Public exploit

    In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe des…

  • Unscored —
    CVE-2019-6203 Public exploit

    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS…