Skip to content
OpenAdvisories

Archive

30 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /30 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2020-9414

    TIBCO Managed File Transfer reflected XSS vulerability

    The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain th…

    TIBCO Software TIBCO Managed File Transfer Internet Server TIBCO Managed File Transfer Command Center
  • High 7.4
    CVE-2020-15087

    Privilege escalation in Presto

    In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not con…

    prestosql Presto io.prestosql:presto-server Maven
  • High 7.7
    CVE-2020-15084

    Authorization bypass in express-jwt

    In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization…

    auth0 express-jwt express-jwt npm
  • High 7.5
    CVE-2020-4044

    Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it

    The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman s…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.2
    CVE-2019-19161

    To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX of TOBESOFT.CO.LTD,

    CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due …

    Tobesoft MIPLATFORM
  • High 7.5
    CVE-2019-19163

    Commax WallPad Remote Code Execution Vulnerability

    A Vulnerability in the firmware of COMMAX WallPad(CDP-1020MB) allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL.

    COMMAX Wallpad
  • High 7.0
    CVE-2020-7816

    A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticat…

    HumanTalk Co,Ltd DaView Indy, DaVA+, DaOffice