Skip to content
OpenAdvisories

Archive

13 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /13 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2020-11063

    Observable Response Discrepancy in TYPO3 CMS

    In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password reset functionality for backend users. This allows an attacker to mount user enumeration based on email addresses assigned to backend user ac…

    TYPO3 TYPO3 CMS typo3/cms typo3/cms-core Web / CMS Packagist
  • Low 3.7
    CVE-2020-1993

    PAN-OS: GlobalProtect Portal PHP session fixation vulnerability

    The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's session ID. This issue affects: All PAN-OS 7.1 and 8.0 versions; …

    Palo Alto Networks PAN-OS Network devices
  • Low 2.3
    CVE-2020-11932 Public exploit

    Subiquity server installer logged LUKS full disk encryption password

    It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

    Canonical subiquity subiquity Ubuntu