General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-6847 | OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a m… | Medium (5.4) | 2020-01-11 | General Purpose |
| CVE-2020-6840 | In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c. | Critical (9.8) | 2020-01-11 | General Purpose |
| CVE-2020-6839 | In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c. | Critical (9.8) | 2020-01-11 | General Purpose |
| CVE-2020-6838 | In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c. | Critical (9.8) | 2020-01-11 | General Purpose |
| CVE-2019-20379 | ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter. | Medium (6.1) | 2020-01-11 | General Purpose |