Skip to content
OpenAdvisories

Archive

26 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /26 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

104 results · Feed

  • Unscored —
    CVE-2020-15342

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.

  • Unscored —
    CVE-2020-15343

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.

  • Unscored —
    CVE-2020-15344

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.

  • Unscored —
    CVE-2020-15345

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.

  • Unscored —
    CVE-2020-15346

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.

  • Unscored —
    CVE-2020-15347

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.

  • Unscored —
    CVE-2020-15325

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.

  • Unscored —
    CVE-2020-15326

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.

  • Unscored —
    CVE-2020-15327

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.

  • Unscored —
    CVE-2020-15328

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.

  • Unscored —
    CVE-2020-15329

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.

  • Unscored —
    CVE-2020-15330

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.

  • Unscored —
    CVE-2020-15331

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.

  • Unscored —
    CVE-2020-15348

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= …

  • Medium 5.9
    CVE-2020-4565

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure…

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2020-4223

    IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users…

    IBM Maximo Asset Management
  • Medium 6.3
    CVE-2019-4650 Public exploit

    IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …

    IBM Maximo Asset Management
  • Unscored —
    CVE-2020-15016

    NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input…

  • Unscored —
    CVE-2020-15017

    NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input.…

  • Unscored —
    CVE-2020-15308

    Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php…

  • Unscored —
    CVE-2020-15304

    An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in Tiled…

    openexr openexr OpenEXR Debian Azure Linux Alpine
  • Unscored —
    CVE-2020-15305

    An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::D…

    openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2020-15306

    An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in g…

    openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine
  • Medium 5.4
    CVE-2020-10753

    A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injecti…

    Red Hat Red Hat Ceph Storage ceph ceph Debian Ubuntu Alpine