Skip to content
OpenAdvisories

Archive

April 2020

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-11651 Exploited Public exploit EPSS 97%

    SaltStack Salt Unauthenticated Remote Code Execution

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be u…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-3161 Exploited Public exploit EPSS 84%

    Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-2883 Exploited Public exploit Scanner template EPSS 95%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    KEV Jan 7, 2025
  • Critical 9.8
    CVE-2020-3952 Exploited Public exploit Scanner template EPSS 90%

    Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Serv…

    KEV Nov 3, 2021