Skip to content
OpenAdvisories

Archive

8 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /8 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.6
    CVE-2020-4040 Public exploit

    CSRF issue on preview pages in Bolt CMS

    Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of p…

    bolt bolt bolt/bolt bolt Azure Linux Packagist
  • Unscored —
    CVE-2020-13884 Public exploit

    Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows lo…

  • Unscored —
    CVE-2020-13885 Public exploit

    Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during…

  • Unscored —
    CVE-2020-12695 Public exploit EPSS 15%

    The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription …

    wpa wpa hostapd libupnp Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-12800 Public exploit Scanner template EPSS 79%

    The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Uplo…

  • Unscored —
    CVE-2020-13866 Public exploit

    WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privilege…