Archive
14 May 2020
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Unscored —CVE-2020-0096 Public exploit
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deput…
-
Medium —CVE-2019-17572 Public exploit
Directory traversal in Apache RocketMQ
In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…
-
Unscored —CVE-2019-15083 Public exploit
Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a works…
-
Unscored —CVE-2020-12717 Public exploit
The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere…