Skip to content
OpenAdvisories

Archive

1 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /1 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Critical 9.8
    CVE-2020-10683

    dom4j allows External Entities by default which might enable XXE attacks

    dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any applicatio…

    dom4j:dom4j dom4j dom4j org.dom4j:dom4j Debian Ubuntu Maven
  • Unscored —
    CVE-2019-4209

    HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to…

    HCL Software HCL Connections
  • High 7.3
    CVE-2020-7351 Public exploit EPSS 65%

    Fonality Trixbox CE Post-Authentication Command Injection

    An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been …

    Fonality Trixbox Community Edition
  • Unscored —
    CVE-2020-12474

    Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Hom…

    telegram-desktop telegram-desktop Debian Ubuntu
  • Unscored —
    CVE-2020-12117

    Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration va…

  • Unscored —
    RUSTSEC-2020-0016

    `net2` crate has been deprecated; use `socket2` instead

    The [`net2`](https://crates.io/crates/net2) crate has been deprecated and users are encouraged to considered [`socket2`](https://crates.io/crates/socket2) instead.

    net2 crates.io