Skip to content
OpenAdvisories

Archive

16 June 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2020-14210 Public exploit

    Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to…

  • Unscored —
    CVE-2020-9289 Public exploit

    Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, Fo…

  • High 7.0
    CVE-2020-13162 Public exploit

    A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down…

  • High 8.1
    CVE-2020-14195 Public exploit

    Deserialization of untrusted data in Jackson Databind

    FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).