Skip to content
OpenAdvisories

Archive

7 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /7 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Unscored —
    CVE-2020-13912

    SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, …

  • Unscored —
    CVE-2020-13910

    Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an i…

  • Critical 9.8
    CVE-2020-13909

    Critical severity vulnerability in Ignition

    The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix.

    facade/ignition Packagist
  • Unscored —
    CVE-2020-13904

    FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libav…

    ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-13902

    ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c dur…

    imagemagick imagemagick Debian Alpine
  • Unscored —
    CVE-2020-13897

    HESK before 3.1.10 allows reflected XSS.

  • Unscored —
    CVE-2020-13895

    Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA sig…

  • Unscored —
    CVE-2020-13894

    handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the s…