Skip to content
OpenAdvisories

Archive

June 2020

Vulnerabilities first published in this month (UTC), newest first.

← May 2020 2020 / June July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

1,813 results · Feed

  • Unscored —
    CVE-2020-15333

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator…

  • Unscored —
    CVE-2020-15334

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file.

  • Unscored —
    CVE-2020-15335

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

  • Unscored —
    CVE-2020-15336

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

  • Unscored —
    CVE-2020-15337

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /re…

  • Unscored —
    CVE-2020-15338

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cn…

  • Unscored —
    CVE-2020-15339

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_…

  • Unscored —
    CVE-2020-15340

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turboli…

  • Unscored —
    CVE-2020-15341

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

  • Unscored —
    CVE-2020-15342

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.

  • Unscored —
    CVE-2020-15343

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.

  • Unscored —
    CVE-2020-15344

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.

  • Unscored —
    CVE-2020-15345

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.

  • Unscored —
    CVE-2020-15346

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.

  • Unscored —
    CVE-2020-15347

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.

  • Unscored —
    CVE-2020-15325

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.

  • Unscored —
    CVE-2020-15326

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.

  • Unscored —
    CVE-2020-15327

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.

  • Unscored —
    CVE-2020-15328

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.

  • Unscored —
    CVE-2020-15329

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.

  • Unscored —
    CVE-2020-15330

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.

  • Unscored —
    CVE-2020-15331

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.

  • Unscored —
    CVE-2020-15348

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= …

  • Medium 5.9
    CVE-2020-4565

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure…

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2020-4223

    IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users…

    IBM Maximo Asset Management
  • Medium 6.3
    CVE-2019-4650 Public exploit

    IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …

    IBM Maximo Asset Management
  • Unscored —
    CVE-2020-15016

    NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input…

  • Unscored —
    CVE-2020-15017

    NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input.…

  • Unscored —
    CVE-2020-15308

    Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php…

  • Unscored —
    CVE-2020-15304

    An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in Tiled…

    openexr openexr OpenEXR Debian Azure Linux Alpine
  • Unscored —
    CVE-2020-15305

    An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::D…

    openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2020-15306

    An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in g…

    openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine
  • Medium 5.4
    CVE-2020-10753

    A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injecti…

    Red Hat Red Hat Ceph Storage ceph ceph Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-5967

    NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition ma…

    NVIDIA NVIDIA GPU Display Driver nvidia-graphics-drivers nvidia-graphics-drivers-440 Debian Ubuntu
  • Unscored —
    CVE-2020-5966

    NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handl…

    NVIDIA NVIDIA GPU Display Driver
  • Unscored —
    CVE-2020-9596

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, a…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9595

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, a…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9597 EPSS 10%

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, a…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9598

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, a…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9601

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, a…

    Adobe Adobe Acrobat and Reader