Skip to content
OpenAdvisories

Archive

22 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /22 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.0
    CVE-2019-14894

    A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which trigger…

    [UNKNOWN] CloudForms
  • High 8.0
    CVE-2020-10736

    An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr …

    [UNKNOWN] ceph ceph ceph Ubuntu Alpine
  • High 8.7
    CVE-2020-4062

    Improper Access Control in Conjur OSS Helm Chart

    In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, inclu…

    cyberark Conjur OSS Helm Chart
  • High 8.6
    CVE-2020-13279

    Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system

    GitLab gitlab-vscode-extension Web / CMS
  • High 7.3
    CVE-2020-8903

    Priviged Escalation in Google Cloud Platform's Guest-OSLogin

    A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role…

    Google guest-oslogin gce-compute-image-packages Ubuntu
  • High 7.5
    CVE-2020-14966

    ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign

    An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows in the length of a sequence and '0' characters appended or prepended to an integer. The modified signatures are…

    jsrsasign npm
  • High 8.8
    CVE-2020-8102

    Insufficient URL sanitization and validation in Safepay Browser (VA-8631)

    Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security…

    Bitdefender Bitdefender Total Security 2020