Skip to content
OpenAdvisories

Archive

2 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /2 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2019-17603

    Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102…

  • Unscored —
    CVE-2020-13227

    An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server …

  • Medium 6.1
    CVE-2020-10959

    MediaWiki Open Redirect vulnerability

    resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.

    mediawiki/core Packagist
  • Unscored —
    CVE-2020-13228 Public exploit

    An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.

  • Medium 5.4
    CVE-2020-4431

    IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

    IBM Planning Analytics Local
  • Medium 6.1
    CVE-2020-4503

    IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

    IBM Planning Analytics Local
  • Medium 5.9
    CVE-2020-4367

    IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to dec…

    IBM Planning Analytics Local
  • Medium 5.4
    CVE-2020-4360

    IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

    IBM Planning Analytics Local
  • Medium 6.1
    CVE-2020-4366

    IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

    IBM Planning Analytics Local
  • Unscored —
    CVE-2020-13229

    An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scg…

  • Medium 6.0
    CVE-2020-13401 Public exploit

    Improper Input Validation in Docker Engine

    An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

    docker.io docker.io docker github.com/docker/docker-ce Debian Ubuntu Alpine Go
  • Unscored —
    CVE-2020-13754

    hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-13659

    address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.

    qemu qemu qemu Debian Ubuntu Alpine
  • High 7.5
    CVE-2020-10739

    Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled:…

    istio.io istio/envoy
  • Unscored —
    CVE-2020-10136 Public exploit EPSS 29%

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packet…

    IETF RFC2003 - IP Encapsulation within IP
  • Medium 6.5
    CVE-2020-10703

    A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in…

    libvirt libvirt libvirt libvirt Debian Ubuntu