Skip to content
OpenAdvisories

Archive

30 March 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2020-5726 Public exploit

    The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A re…

  • Unscored —
    CVE-2020-5724 Public exploit EPSS 12%

    The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endp…

  • Unscored —
    CVE-2020-5723 Public exploit

    The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an att…

  • Unscored —
    CVE-2020-10560 Public exploit

    An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak crypt…