Skip to content
OpenAdvisories

Archive

3 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /3 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-3258

    Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local att…

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Critical 9.8
    CVE-2020-3198

    Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local att…

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • Critical 9.8
    CVE-2020-3227

    Cisco IOx for IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is du…

    Cisco Cisco IOS XE Software 16.3.1 iOS Network devices
  • Critical 9.8
    CVE-2020-13756 Public exploit EPSS 50%

    Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

    Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.

    sabberworm/php-css-parser php-horde-css-parser php-horde-css-parser Debian Ubuntu Packagist
  • Critical 9.1
    CVE-2020-1963

    File system access via H2 in Apache Ignite

    Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.

    org.apache.ignite:ignite-core Maven