Skip to content
OpenAdvisories

Archive

21 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /21 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Unscored —
    CVE-2020-14959

    Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject …

  • Unscored —
    CVE-2020-14960

    A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype para…

  • Medium 5.3
    CVE-2020-14961

    Unrestricted Uploads in Concrete5

    Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

    concrete5/concrete5 Packagist
  • Unscored —
    CVE-2020-14962

    Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to in…

  • Medium 5.3
    CVE-2020-14958

    Insecure Permissions in Gogs

    In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.

    gogs.io/gogs Go
  • Unscored —
    CVE-2020-14954

    Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. Whe…

    mutt mutt neomutt neomutt Debian Ubuntu
  • Unscored —
    CVE-2020-14950

    aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a mod…

  • Critical 9.8
    CVE-2020-14942

    Deserialization of Untrusted Data in Tendenci

    Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.

    tendenci PyPI