Skip to content
OpenAdvisories

Archive

7 May 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.0

    Improper Validation of Certificate with Host Mismatch in Java-WebSocket

    In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.

  • Critical 9.1
    CVE-2020-4428 Exploited Public exploit EPSS 62%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary c…

    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2020-4429 Public exploit Scanner template EPSS 72%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrati…

  • Critical 9.0
    CVE-2020-4427 Exploited Public exploit Scanner template EPSS 70%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security res…

    KEV Nov 3, 2021
  • Critical 9.8

    curlrequest allows execution of arbitrary commands

    curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input.

  • Critical 9.9

    An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CO…