Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-3191 |
|
Vulnerability in c (CVE-2020-3191)
vulnerability in c (CVE-2020-3191). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3195 |
|
Vulnerability in dos (CVE-2020-3195)
vulnerability in dos (CVE-2020-3195). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3196 |
|
Vulnerability in dos (CVE-2020-3196)
vulnerability in dos (CVE-2020-3196). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3253 |
|
Vulnerability in cisco (CVE-2020-3253)
vulnerability in cisco (CVE-2020-3253). Successful exploitation can lead to full system takeover.
|
| CVE-2020-3254 |
|
Vulnerability in dos (CVE-2020-3254)
vulnerability in dos (CVE-2020-3254). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3255 |
|
Vulnerability in dos (CVE-2020-3255)
vulnerability in dos (CVE-2020-3255). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3283 |
|
Buffer Overflow in dos (CVE-2020-3283)
vulnerability in dos (CVE-2020-3283). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3285 |
|
Vulnerability in cisco (CVE-2020-3285)
vulnerability in cisco (CVE-2020-3285). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3298 |
|
Out-of-Bounds Read in dos (CVE-2020-3298)
vulnerability in dos (CVE-2020-3298). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3179 |
|
Vulnerability in dos (CVE-2020-3179)
vulnerability in dos (CVE-2020-3179). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-10683 |
|
XXE (XML External Entity) in dom4j-project (CVE-2020-10683)
vulnerability in dom4j-project (CVE-2020-10683). Successful exploitation can lead to full system takeover.
|
| CVE-2020-9488 |
|
Vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488)
vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.2` or later.
|
| CVE-2020-2912 |
|
Vulnerability in c (CVE-2020-2912)
vulnerability in c (CVE-2020-2912). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-10932 |
|
Vulnerability in arm (CVE-2020-10932)
vulnerability in arm (CVE-2020-10932). Confidential information can be exposed externally.
|
| CVE-2020-11619 |
|
Unsafe Deserialization in fasterxml (CVE-2020-11619)
vulnerability in fasterxml (CVE-2020-11619). Successful exploitation can lead to full system takeover.
|
| CVE-2020-11111 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, an...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).
|
| CVE-2020-11112 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/common...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
|
| CVE-2020-11113 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
|
| CVE-2020-10969 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
|
| CVE-2020-10968 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
|
| CVE-2020-10672 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
|
| CVE-2020-10673 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
|
| CVE-2019-18336 |
|
Vulnerability in siemens (CVE-2019-18336)
vulnerability in siemens (CVE-2019-18336). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-9281 |
|
Cross-Site Scripting (XSS) in ckeditor (CVE-2020-9281)
cross-site scripting in ckeditor (CVE-2020-9281). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-9548 |
|
Unsafe Deserialization in fasterxml (CVE-2020-9548)
vulnerability in fasterxml (CVE-2020-9548). Successful exploitation can lead to full system takeover.
|
| CVE-2020-9546 |
|
Unsafe Deserialization in apache (CVE-2020-9546)
vulnerability in apache (CVE-2020-9546). Successful exploitation can lead to full system takeover.
|
| CVE-2020-3166 |
|
Vulnerability in cisco (CVE-2020-3166)
vulnerability in cisco (CVE-2020-3166). Successful exploitation can lead to full system takeover.
|
| CVE-2020-3167 |
|
OS Command Injection in cisco (CVE-2020-3167)
OS command injection in cisco (CVE-2020-3167). Successful exploitation can lead to full system takeover.
|
| CVE-2019-17569 |
|
Vulnerability in apache (CVE-2019-17569)
vulnerability in apache (CVE-2019-17569). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-17571 |
|
Unsafe Deserialization in log4j:log4j (CVE-2019-17571)
vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.
|
| CVE-2019-19634 |
|
Unrestricted File Upload in verot/class.upload.php (CVE-2019-19634)
vulnerability in verot/class.upload.php (CVE-2019-19634). Successful exploitation can lead to full system takeover.
|
| CVE-2019-19576 |
|
Unrestricted File Upload in verot/class.upload.php (CVE-2019-19576)
vulnerability in verot/class.upload.php (CVE-2019-19576). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.4` or later.
|
| CVE-2019-19378 |
|
Out-of-Bounds Write in c (CVE-2019-19378)
out-of-bounds write in c (CVE-2019-19378). Successful exploitation can lead to full system takeover.
|
| CVE-2019-13721 |
|
Use-After-Free in google (CVE-2019-13721)
vulnerability in google (CVE-2019-13721). Successful exploitation can lead to full system takeover.
|
| CVE-2019-6852 |
|
Information Disclosure in schneider-electric (CVE-2019-6852)
vulnerability in schneider-electric (CVE-2019-6852). Confidential information can be exposed externally.
|
| CVE-2019-11135 |
|
Vulnerability in opensuse (CVE-2019-11135)
vulnerability in opensuse (CVE-2019-11135). Confidential information can be exposed externally.
|
| CVE-2019-10219 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2019-10219)
cross-site scripting in redhat (CVE-2019-10219). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1978 |
|
Vulnerability in cisco (CVE-2019-1978)
vulnerability in cisco (CVE-2019-1978). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1980 |
|
Vulnerability in cisco (CVE-2019-1980)
vulnerability in cisco (CVE-2019-1980). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1981 |
|
Vulnerability in cisco (CVE-2019-1981)
vulnerability in cisco (CVE-2019-1981). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1982 |
|
Vulnerability in cisco (CVE-2019-1982)
vulnerability in cisco (CVE-2019-1982). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-18197 |
|
Use-After-Free in nokogiri (CVE-2019-18197)
vulnerability in nokogiri (CVE-2019-18197). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.10.5` or later.
|
| CVE-2019-15256 |
|
Vulnerability in dos (CVE-2019-15256)
vulnerability in dos (CVE-2019-15256). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12694 |
|
Vulnerability in cisco (CVE-2019-12694)
vulnerability in cisco (CVE-2019-12694). Successful exploitation can lead to full system takeover.
|
| CVE-2019-12695 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2019-12695)
cross-site scripting in cisco (CVE-2019-12695). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12698 |
|
Vulnerability in dos (CVE-2019-12698)
vulnerability in dos (CVE-2019-12698). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12699 |
|
Vulnerability in cisco (CVE-2019-12699)
vulnerability in cisco (CVE-2019-12699). Successful exploitation can lead to full system takeover.
|
| CVE-2019-12700 |
|
Vulnerability in dos (CVE-2019-12700)
vulnerability in dos (CVE-2019-12700). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12673 |
|
Buffer Overflow in dos (CVE-2019-12673)
vulnerability in dos (CVE-2019-12673). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12674 |
|
Vulnerability in cisco (CVE-2019-12674)
vulnerability in cisco (CVE-2019-12674). Successful exploitation can lead to full system takeover.
|