Skip to content
OpenAdvisories

Archive

19 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /19 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-14930 Public exploit

    An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-re…

  • Medium 5.3
    CVE-2020-9495 Public exploit

    Injection in Apache Archiva

    Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LD…

    org.apache.archiva:archiva Maven
  • Medium 6.3
    CVE-2020-13277 Public exploit

    An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and late…

    GitLab GitLab Web / CMS
  • Critical 9.8
    CVE-2020-8165 Public exploit EPSS 46%

    ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore

    A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

    rails rails activesupport Debian Ubuntu RubyGems
  • High 7.5
    CVE-2020-8162 Public exploit

    Circumvention of file size limits in ActiveStorage

    A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

    rails rails activestorage Debian Ubuntu RubyGems