Skip to content
OpenAdvisories

Archive

7 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /7 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2020-12720 Public exploit Scanner template EPSS 89%

    vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

  • Critical 9.1
    CVE-2020-4428 Exploited Public exploit EPSS 62%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary c…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2020-4429 Public exploit Scanner template EPSS 72%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrati…

    IBM Data Risk Manager
  • Critical 9.0
    CVE-2020-4427 Exploited Public exploit Scanner template EPSS 70%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security res…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-12116 Public exploit Scanner template EPSS 97%

    Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attac…

  • Unscored —
    CVE-2020-12704 Public exploit

    UliCMS before 2020.2 has PageController stored XSS.

  • Unscored —
    CVE-2020-12706 Public exploit

    Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2020-12707 Public exploit

    An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only secu…

  • Unscored —
    CVE-2020-12608 Public exploit EPSS 22%

    An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Mon…

  • Unscored —
    CVE-2020-7473 Public exploit EPSS 14%

    In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most…

  • Unscored —
    CVE-2020-12696 Public exploit

    The iframe plugin before 4.5 for WordPress does not sanitize a URL.