Archive
9 June 2020
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Unscored —CVE-2020-13996 Public exploit
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…
-
Unscored —CVE-2020-1283 Public exploit
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protoco…
-
Unscored —
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted da…
-
Unscored —
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior…
-
Unscored —
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execu…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —CVE-2020-9856 Public exploit
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be abl…
-
Unscored —CVE-2020-9839 Public exploit
A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Cat…
-
High 8.8CVE-2020-9802 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —CVE-2020-9801 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may c…
-
Unscored —CVE-2020-10757 Public exploit
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allo…
-
Medium 6.1CVE-2020-13973 Public exploit
Cross-site scripting in json-sanitizer
OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where…
-
Medium 6.3
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…
KEV Jun 26, 2024