Skip to content
OpenAdvisories

Archive

15 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /15 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-1758

    Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak

    A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.

    Red Hat keycloak org.keycloak:keycloak-parent Maven
  • Medium 6.1
    CVE-2019-20389

    Subrion CMS XSS

    An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's b…

    intelliants/subrion Packagist
  • Medium 4.4
    CVE-2020-7809

    Estsoft ALSong DOM-Based XSS Vulnerability

    ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) fil…

    ALSong Estsoft
  • Medium 5.0
    CVE-2020-10744

    Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

    An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. …

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI