Skip to content
OpenAdvisories

Archive

15 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /15 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

90 results · Feed

  • Medium 6.5
    CVE-2018-16848

    OpenStack Mistral DoS

    A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of servi…

    mistral mistral mistral Debian Ubuntu PyPI
  • Unscored —
    CVE-2020-0539

    Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12…

  • Unscored —
    CVE-2020-8674

    Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.…

  • Unscored —
    CVE-2020-0545

    Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions b…

  • Unscored —
    CVE-2020-0537

    Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may all…

  • Unscored —
    CVE-2020-0536

    Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, …

  • Unscored —
    CVE-2020-0540

    Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow …

  • Unscored —
    CVE-2020-0535

    Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthen…

  • Unscored —
    CVE-2020-0531

    Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenti…

  • Unscored —
    CVE-2020-0597

    Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthentica…

  • Unscored —
    CVE-2020-0541

    Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a pr…

  • Unscored —
    CVE-2020-0532

    Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may all…

  • Unscored —
    CVE-2020-0566

    Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated use…

  • Unscored —
    CVE-2020-0533

    Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to …

  • Unscored —
    CVE-2020-0534

    Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 …

  • Unscored —
    CVE-2020-0538

    Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may all…

  • Unscored —
    CVE-2020-0596

    Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22…

  • Unscored —
    CVE-2020-0542

    Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may a…

  • Unscored —
    CVE-2020-0586

    Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 m…

  • Unscored —
    CVE-2020-0595

    Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.…

  • Unscored —
    CVE-2020-0594

    Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 1…

  • Unscored —
    CVE-2020-0543

    Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticate…

    linux xen xen intel-microcode Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-0529

    Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allo…

  • Unscored —
    CVE-2020-0528

    Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor familie…

  • Unscored —
    CVE-2020-8675

    Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1…

  • Unscored —
    CVE-2020-0527

    Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to pote…

  • Medium 5.4
    CVE-2020-14146

    KumbiaPHP Cross-site Scripting

    KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATH_INFO.

    kumbiaphp/kumbiapp Packagist
  • High 7.5
    CVE-2020-4494

    IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum …

    IBM Spectrum Protect for Space Management (Linux) Spectrum Protect Client (Linux and Windows) Spectrum Protect for Space Management (AIX) Linux Windows
  • Medium 5.3
    CVE-2020-4477

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log f…

    IBM Spectrum Protect Plus
  • Medium 4.8
    CVE-2020-4471

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or…

    IBM Spectrum Protect Plus
  • High 7.1
    CVE-2020-4470

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload …

    IBM Spectrum Protect Plus
  • High 8.1
    CVE-2020-4469 EPSS 13%

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. …

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2020-4406

    IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum …

    IBM Spectrum Protect for Space Management (Linux) Spectrum Protect Client (Linux and Windows) Spectrum Protect for Space Management (AIX) Linux Windows
  • High 7.5
    CVE-2020-4216

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic ke…

    IBM Spectrum Protect Plus
  • Unscored —
    CVE-2019-19111

    The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.

  • Unscored —
    CVE-2019-19110

    The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.

  • Unscored —
    CVE-2019-19109

    The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.

  • Unscored —
    CVE-2019-19112

    The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.

  • Unscored —
    CVE-2020-14076

    TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allow…

  • Unscored —
    CVE-2020-14093

    Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.

    mutt mutt neomutt mutt Debian Ubuntu Alpine