Skip to content
OpenAdvisories

Archive

22 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /22 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2020-14943 Public exploit

    The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cro…

  • Unscored —
    CVE-2020-14944 Public exploit

    Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can al…

  • Unscored —
    CVE-2020-14945 Public exploit EPSS 11%

    A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an aut…

  • Unscored —
    CVE-2020-14946 Public exploit

    downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and …

  • Critical 9.8
    CVE-2020-11989 Public exploit EPSS 24%

    Improper Authentication in Apache Shiro

    Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven
  • Unscored —
    CVE-2020-11519 Public exploit

    The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sec…

  • Unscored —
    CVE-2020-13158 Public exploit Scanner template EPSS 52%

    Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup param…

  • Unscored —
    CVE-2020-13159 Public exploit

    Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name,…

  • Unscored —
    CVE-2020-14461 Public exploit

    Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.

  • Low 3.5
    CVE-2020-11097 Public exploit

    OOB read in ntlm_av_pair_get in FreeRDP

    In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine