Skip to content
OpenAdvisories

Archive

11 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /11 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2020-4045

    Information disclosure in SSB-DB

    SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decry…

    ssbc SSB-DB ssb-db npm
  • High 7.5
    CVE-2020-13250

    Allocation of Resources Without Limits or Throttling in Hashicorp Consul

    HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 8.1
    CVE-2020-5411

    Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with glo…

    Spring by VMware Spring Batch org.springframework.batch:spring-batch-core Maven
  • High 7.5
    CVE-2020-13998

    Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on …

  • High 7.5
    CVE-2020-11090

    Uncontrolled Resource Consumption in Indy Node

    In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view change…

    hyperledger indy-node indy-node PyPI