Skip to content
OpenAdvisories

Archive

22 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /22 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.7
    CVE-2019-3865

    A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay…

    [UNKNOWN] quay
  • Medium 6.4
    CVE-2020-1727

    A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks pr…

    [UNKNOWN] keycloak
  • Medium 6.6
    CVE-2020-10740

    Wildfly Unsafe Deserialization Vulnerability

    A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

    [UNKNOWN] wildfly org.wildfly:wildfly-parent Maven
  • Medium 4.1
    CVE-2020-4060

    Use After Free in in cups_update_info in LoRa Basics Station

    In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message (https://doc.sm.tc/station/cupsproto.html#http-post-response) w…

    LoRa Basics LoRa Basics Station
  • Medium 4.6
    CVE-2020-4070

    Cross-site Scripting in CSS Validator

    In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9.

    World Wide Web Consortium (W3C) CSS Validator
  • Medium 6.3
    CVE-2020-4068

    Heap-based Buffer Overflow in APNSwift

    In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1.

    kylebrowning APNSwift
  • Medium 5.3
    CVE-2020-7262

    Improper Access Control vulnerability in ATD

    Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.

    McAfee McAfee Advanced Threat Defense (ATD)