Skip to content
OpenAdvisories

Archive

2 May 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Feed

  • Critical 9.8

    chrome-launcher subject to OS Command Injection

    All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems.

  • Unscored —

    Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated…

  • Unscored —

    UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unr…