Skip to content
OpenAdvisories

Archive

4 May 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-12109 Public exploit EPSS 74%

    Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220…

  • Unscored —
    CVE-2020-12640 Public exploit

    Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a pl…

  • Critical 9.8
    CVE-2020-12641 Exploited Public exploit Scanner template EPSS 84%

    rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters i…

    KEV Jun 22, 2023
  • Unscored —
    CVE-2020-12629 Public exploit

    include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

  • Unscored —
    CVE-2020-12625 Public exploit

    An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube…