Skip to content
OpenAdvisories

Archive

4 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /4 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7661 Public exploit

    Regular expression denial of service in url-regex

    all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.

    url-regex npm
  • High 7.7
    CVE-2020-13692

    Improper Restriction of XML External Entity Reference

    PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

    libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven
  • High 7.7
    CVE-2020-13822

    Signature Malleabillity in elliptic

    The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.

    elliptic node-elliptic node-elliptic Debian Ubuntu npm
  • High 7.6
    CVE-2020-4509

    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A …

    IBM QRadar SIEM