Skip to content
OpenAdvisories

Archive

12 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /12 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2020-11060 Public exploit EPSS 11%

    Remote Code Execution in GLPI

    In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the exploitation, the attack…

    GLPI glpi glpi Ubuntu
  • High 7.2
    CVE-2020-5248 Public exploit

    Public GLPIKEY can be used to decrypt any data in GLPI

    GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GL…

    GLPI glpi glpi Ubuntu