2020-03-10

2020-03-11

2020-03-12

All (2) Critical (5) High (6) Medium (2)

CVE-2020-7598 Mar 11, 23:15 MEDIUM POC PATCH This Month

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Prototype Pollution Leap Opensuse Minimist

NVD

CVSS 3.1

5.6

EPSS

1.9%

CVE-2020-1733 Mar 11, 19:15 MEDIUM POC PATCH This Month

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. Rated medium severity (CVSS 5.0). Public exploit code available and no vendor patch available.

Information Disclosure Debian Red Hat Debian Linux Fedora +5

NVD GitHub

CVSS 3.1

5.0

EPSS

0.4%