Skip to content
OpenAdvisories

Archive

14 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /14 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

70 results · Feed

  • Unscored —
    CVE-2019-13021

    The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem…

  • Unscored —
    CVE-2019-17562

    A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack. This applies to all ver…

  • Medium —
    CVE-2019-17572 Public exploit

    Directory traversal in Apache RocketMQ

    In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…

    org.apache.rocketmq:rocketmq-broker Maven
  • Medium 4.7
    CVE-2020-1960

    Command injection in Apache Flink

    A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when running a process with an enabled JMXReporter, with a port con…

    org.apache.flink:flink-core Maven
  • Medium 6.3
    CVE-2020-1945

    Sensitive Data Exposure in Apache Ant

    Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the te…

    ant ant apache-ant org.apache.ant:ant Debian Ubuntu Alpine Maven
  • Unscored —
    CVE-2020-10626

    In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malic…

  • High 7.8
    CVE-2020-4467

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4468

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • Medium 5.3
    CVE-2020-4365

    IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted reque…

    IBM WebSphere Application Server
  • High 7.8
    CVE-2020-4343

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4422

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4288

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • Medium 4.3
    CVE-2020-4299

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user throu…

    IBM Sterling B2B Integrator
  • High 7.8
    CVE-2020-4285

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4287

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused…

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4265

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4266

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4264

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4263

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4261

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4262

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • Medium 6.5
    CVE-2020-4259

    IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information…

    IBM Sterling File Gateway
  • High 7.8
    CVE-2020-4258

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • High 7.8
    CVE-2020-4257

    IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused …

    IBM i2 Analysts Notebook
  • Unscored —
    CVE-2019-15083 Public exploit

    Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a works…

  • Unscored —
    CVE-2020-12717 Public exploit

    The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere…

  • Unscored —
    CVE-2020-5576

    Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Mova…

    Six Apart Movable Type
  • Unscored —
    CVE-2020-5577

    Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)…

    Six Apart Movable Type
  • Unscored —
    CVE-2020-5574

    HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable…

    Six Apart Movable Type
  • Unscored —
    CVE-2020-5575

    Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), …

    Six Apart Movable Type