Skip to content
OpenAdvisories

Archive

19 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /19 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium —
    CVE-2017-18874

    Mattermost Server is vulnerable to Directory Traversal by System Admins

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal.

    github.com/mattermost/mattermost-server Go
  • Medium 5.3
    CVE-2017-18873

    Mattermost Server is vulnerable to channel invisibility DoS via misformatted post

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post.

    github.com/mattermost/mattermost-server Go
  • Medium 4.3
    CVE-2017-18872

    Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization

    An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

    github.com/mattermost/mattermost-server Go
  • Medium 6.3
    CVE-2020-13277 Public exploit

    An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and late…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2020-8167

    CSRF Vulnerability in rails-ujs

    A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.

    rails rails actionview Debian Ubuntu RubyGems
  • Medium —
    CVE-2017-18877

    Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page.

    github.com/mattermost/mattermost-server Go
  • Medium —
    CVE-2017-18876

    Mattermost Server is vulnerable to Path Traversal when files are stored locally

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file.

    github.com/mattermost/mattermost-server Go
  • Medium —
    CVE-2017-18875

    Mattermost Server does not prevent System Admin from arbitrary file creation

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files.

    github.com/mattermost/mattermost-server Go
  • Medium 6.5
    CVE-2020-13961

    Improper Input Validation in strapi

    Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafted request, an attacker could exploit this vulnerability to u…

    strapi npm
  • Medium 6.1
    CVE-2020-14475

    Dolibarr reflected cross-site scripting (XSS) vulnerability

    A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

    dolibarr/dolibarr Packagist
  • Medium 5.4
    CVE-2020-4297

    IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerab…

    IBM Rational DOORS Next Generation
  • Medium 5.4
    CVE-2020-4281

    IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerab…

    IBM Rational DOORS Next Generation
  • Medium 5.4
    CVE-2020-4295

    IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerab…

    IBM Rational DOORS Next Generation
  • Medium 5.3
    CVE-2020-14457

    Mattermost Server Sensitive Data Exposure

    An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012.

    github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v5 github.com/mattermost/mattermost Go