Skip to content
OpenAdvisories

Archive

4 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /4 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.3
    CVE-2020-5343

    Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insec…

    Dell CPG SW
  • High 8.2
    CVE-2020-5334

    RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulne…

    Dell RSA Archer
  • High 7.2
    CVE-2020-5332

    RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious u…

    Dell RSA Archer
  • High 8.8
    CVE-2020-5331

    RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session informati…

    Dell RSA Archer
  • High 7.5
    CVE-2020-12642

    XXE vulnerability in Launch import

    An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.

    com.epam.reportportal:service-api Maven
  • High 8.1
    CVE-2020-11671

    Missing Authorization in TeamPass

    Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API i…

    nilsteampassnet/teampass Packagist
  • High 7.5
    CVE-2020-10187

    Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper

    Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply…

    doorkeeper ruby-doorkeeper Debian RubyGems
  • High 8.4
    CVE-2020-8018

    User owned /etc in SLES15-SP1-CHOST-BYOS

    A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user …

    SUSE SUSE Linux Enterprise Server 15 SP1 Linux
  • High 8.6
    CVE-2019-11823

    CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attac…

    Synology Synology Router Manager (SRM)
  • High 8.8
    CVE-2020-1631 Exploited

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI)…

    Juniper Networks Junos OS Network devices
    KEV Mar 25, 2022