Archive

26 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /26 July 2020 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Medium 6.1

CVE-2020-9577

Magento stored cross-site scripting vulnerability

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .

Adobe Magento magento/community-edition magento/project-community-edition Web / CMS Packagist

Jun 26, 2020
Medium 6.1

CVE-2020-9581

Magento stored cross-site scripting vulnerability

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Adobe Magento magento/community-edition magento/project-community-edition Web / CMS Packagist

Jun 26, 2020
Medium 5.4

CVE-2020-9584

Magento Stored cross-site scripting

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Adobe Magento magento/community-edition magento/project-community-edition Web / CMS Packagist

Jun 26, 2020
Medium —

CVE-2013-7489

Deserialization of Untrusted Data in Beaker

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

beaker beaker beaker Debian Ubuntu PyPI

Jun 26, 2020
Medium 6.8

CVE-2020-9047 Public exploit Scanner template

exacqVision Software - Improper Verification of Cryptographic Signature

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with a…

Johnson Controls exacqVision Enterprise Manager versions 20.03.3.0 and prior exacqVision Web Service versions 20.03.2.0 and prior

Jun 26, 2020
Medium 5.5

CVE-2020-10727

ActiveMQ Artemis has Insufficiently Protected Credentials

A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local …

Red Hat ActiveMQ Artemis org.apache.activemq:artemis-commons Maven

Jun 26, 2020
Medium 5.9

CVE-2020-4565

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure…

IBM Spectrum Protect Plus

Jun 26, 2020
Medium 5.4

CVE-2020-4223

IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users…

IBM Maximo Asset Management

Jun 26, 2020
Medium 6.3

CVE-2019-4650 Public exploit

IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …

IBM Maximo Asset Management

Jun 26, 2020
Medium 5.4

CVE-2020-10753

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injecti…

Red Hat Red Hat Ceph Storage ceph ceph Debian Ubuntu Alpine

Jun 26, 2020