Skip to content
OpenAdvisories

Archive

29 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /29 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-4037

    Open Redirect in OAuth2 Proxy

    In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to acc…

    oauth2-proxy oauth2-proxy github.com/oauth2-proxy/oauth2-proxy Go
  • Medium 5.9
    CVE-2020-14145

    The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorith…

    openssh openssh Debian Alpine
  • Medium 5.4
    CVE-2020-4557

    IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cr…

    IBM Business Automation Workflow Business Process Manager
  • Medium 5.7
    CVE-2019-19160

    Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into t…

    Cabsoftware Reportexpress ProPlus
  • Medium 5.9
    CVE-2020-4452

    IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an …

    IBM API Connect
  • Medium 5.3
    CVE-2020-8024

    Problematic permissions in hylafax+ packaging allow escalation from uucp to other users

    A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 …

    openSUSE openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Factory Ubuntu
  • Medium 6.1
    CVE-2020-15368 Public exploit

    AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering…