12 May 2020

12 results · Clear filters · Feed

• High 7.1
  CVE-2020-1718

  Improper Authentication for Keycloak

  A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

  Red Hat keycloak org.keycloak:keycloak-parent Maven
  May 12, 2020
• High 7.4
  CVE-2020-11060 Public exploit EPSS 11%

  Remote Code Execution in GLPI

  In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the exploitation, the attack…

  GLPI glpi glpi Ubuntu
  May 12, 2020
• High 8.8
  CVE-2020-6241

  SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to eleva…

  SAP SAP Adaptive Server Enterprise
  May 12, 2020
• High 7.2
  CVE-2020-6253

  Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated u…

  SAP SAP Adaptive Server Enterprise (Web Services)
  May 12, 2020
• High 7.0
  CVE-2020-6244

  SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious c…

  SAP SAP Business Client
  May 12, 2020
• High 7.7
  CVE-2020-6249

  The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_B…

  SAP SAP Master Data Governance (S4CORE) SAP Master Data Governance (SAP_BS_FND) SAP Master Data Governance (S4FND)
  May 12, 2020
• High 8.0
  CVE-2020-6243

  Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not…

  SAP SAP Adaptive Server Enterprise (XP Server on Windows Platform) Windows
  May 12, 2020
• High 7.2
  CVE-2020-5248 Public exploit

  Public GLPIKEY can be used to decrypt any data in GLPI

  GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GL…

  GLPI glpi glpi Ubuntu
  May 12, 2020
• High 7.5
  CVE-2020-1763

  An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an una…

  The Libreswan Project libreswan libreswan libreswan Debian Ubuntu Alpine
  May 12, 2020
• High 7.5
  CVE-2020-8151

  Information disclosure issue in Active Resource

  There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.

  rails activeresource Ubuntu RubyGems
  May 12, 2020
• High 8.6
  CVE-2020-11072

  False-negative validation results in MINT transactions with invalid baton

  In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the d…

  simpleledger slp-validate slp-validate npm
  May 12, 2020
• High 8.6
  CVE-2020-11071

  False-negative validation results in MINT transactions with invalid baton

  SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would resul…

  simpleledger slpjs slpjs npm
  May 12, 2020