Skip to content
OpenAdvisories

Archive

11 May 2020

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Unscored —

    An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protecti…

  • Unscored —
    CVE-2020-11108 Public exploit EPSS 78%

    The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abu…

  • Unscored —

    Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypas…

  • Medium 5.0

    Keycloak leaks sensitive information in logged exceptions

    A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

  • Unscored —

    An issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in any other way prevent …

  • Unscored —

    Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code…

  • Medium 5.0

    Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

    A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault fi…