Skip to content
OpenAdvisories

Archive

1 July 2020

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-15500 Public exploit Scanner template EPSS 12%

    Cross-site scripting in TileServer GL

    An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS.

  • Unscored —
    CVE-2020-5903 Public exploit

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross-Site Scripting (XSS) vul…

  • Unscored —
    CVE-2020-13383 Public exploit EPSS 68%

    openSIS through 7.4 allows Directory Traversal.

  • Unscored —
    CVE-2020-13382 Public exploit EPSS 53%

    openSIS through 7.4 has Incorrect Access Control.

  • Unscored —
    CVE-2020-13381 Public exploit EPSS 59%

    openSIS through 7.4 allows SQL Injection.

  • Unscored —
    CVE-2020-15478 Public exploit

    The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.

  • Unscored —
    CVE-2020-15468 Public exploit

    Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.

  • Unscored —
    CVE-2020-14166 Public exploit

    The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows rem…

  • Critical 9.8
    CVE-2020-5902 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic…

    KEV Nov 3, 2021