Archive

12 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /12 June 2020 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Critical 9.9

CVE-2020-11057

Code Injection in XWiki Platform

In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0.

xwiki xwiki-platform

May 12, 2020
Critical 9.8

CVE-2020-6242

SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an at…

SAP SAP Business Objects Business Intelligence Platform (Live Data Connect)

May 12, 2020
Critical 9.0

CVE-2020-6252

Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to loca…

SAP SAP Adaptive Server Enterprise (Cockpit)

May 12, 2020
Critical 9.9

CVE-2020-6262

Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1…

SAP SAP Application Server ABAP (ST-PI)

May 12, 2020
Critical 9.1

CVE-2020-6248

SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an a…

SAP SAP Adaptive Server Enterprise (Backup Server)

May 12, 2020
Critical 9.8

CVE-2020-8159

Arbitrary file write in actionpack-page_caching gem

There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.

actionpack-page_caching ruby-actionpack-page-caching ruby-actionpack-page-caching Debian Ubuntu RubyGems

May 12, 2020