Skip to content
OpenAdvisories

Archive

June 2020

Vulnerabilities first published in this month (UTC), newest first.

← May 2020 2020 / June July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

1,813 results · Feed

  • Critical 10.0
    CVE-2020-8967

    GESIO SQL injection vulnerability

    There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information.

    Gesio (GESTIÓN INTEGRAL ONLINE, SL) GESIO ERP
  • High 7.5
    CVE-2020-7659

    HTTP Request Smuggling in reel

    reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encodi…

    reel reel Ubuntu RubyGems
  • Unscored —
    CVE-2020-6868

    There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connect…

  • Unscored —
    CVE-2020-4023

    The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject a…

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4021

    Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote …

    Atlassian Jira Server and Data Center Web / CMS
  • Unscored —
    CVE-2020-4020

    The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who con…

    Atlassian Companion App
  • Unscored —
    CVE-2020-4018

    The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setu…

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4019

    The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the a…

    Atlassian Companion App
  • Unscored —
    CVE-2020-4015

    The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attacker…

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4017

    The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible be…

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4016

    The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before v…

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4014

    The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to …

    Atlassian Crucible Fisheye
  • Unscored —
    CVE-2020-4013

    The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary …

    Atlassian Crucible Fisheye