Skip to content
OpenAdvisories

Archive

14 May 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2020-0096 Public exploit

    In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deput…

  • Medium —
    CVE-2019-17572 Public exploit

    Directory traversal in Apache RocketMQ

    In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…

  • Unscored —
    CVE-2019-15083 Public exploit

    Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a works…

  • Unscored —
    CVE-2020-12717 Public exploit

    The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere…