Skip to content
OpenAdvisories

Archive

11 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /11 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.8
    CVE-2020-10059

    UpdateHub Module Explicitly Disables TLS Verification

    The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue af…

    zephyrproject-rtos Zephyr
  • Medium 6.9
    CVE-2020-10023

    Shell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trim

    The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in denial of service or possibly code execution within the Zephyr kernel. See NCC-NCC-019 This issue affect…

    zephyrproject-rtos Zephyr
  • Medium 4.3
    CVE-2020-1724

    Keycloak Insufficient Session Expiry

    A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 5.3
    CVE-2020-7647

    path traversal in Jooby

    All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.

    org.jooby:jooby io.jooby:jooby Maven
  • Medium 5.9
    CVE-2019-4667

    IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure…

    IBM UrbanCode Deploy
  • Medium 5.0
    CVE-2020-1698

    Keycloak leaks sensitive information in logged exceptions

    A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 5.0
    CVE-2020-10685

    Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

    A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault fi…

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI