Skip to content
OpenAdvisories

Archive

17 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /17 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-11887

    XSS in svg2png (NPM package)

    svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.

    svg2png npm
  • Medium 4.0
    CVE-2020-11885

    WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the …

  • Medium 5.3
    CVE-2020-11883 Public exploit EPSS 15%

    Diavante vue-storefront-api and storefront-api disclose stack trace

    In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

    vue-storefront-api storefront-api npm
  • Medium 5.1
    CVE-2020-1751

    An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specif…

    Red Hat glibc glibc eglibc Debian Ubuntu
  • Medium 5.3
    CVE-2020-4277

    IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an at…

    IBM TRIRIGA Application Platform
  • Medium 5.4
    CVE-2019-4749

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 6.1
    CVE-2019-4644

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 5.4
    CVE-2019-4446

    IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifyi…

    IBM Maximo Asset Management
  • Medium 5.9
    CVE-2020-11868

    ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronizati…

    ntp ntp Debian Ubuntu
  • Medium 4.3
    CVE-2019-7306

    Byobu apport hook uploads user's ~/.screenrc

    Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

    Canonical byobu byobu byobu Debian Ubuntu