Skip to content
OpenAdvisories

Archive

23 June 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-9480 Public exploit Scanner template EPSS 30%

    Improper Authentication in Apache Spark

    In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application…

  • Unscored —
    CVE-2020-14073 Public exploit

    XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can …

  • Unscored —
    CVE-2020-14974 Public exploit

    The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running …

  • Unscored —
    CVE-2020-14965 Public exploit

    On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and …