Skip to content
OpenAdvisories

Archive

1 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /1 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.4
    CVE-2020-7688

    Command Injection

    The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

    mversion npm
  • High 7.8
    CVE-2020-12498

    Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

    mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

    Phoenix Contact Automation Worx Express Automation Worx ICS / OT
  • High 7.8
    CVE-2020-12497 EPSS 15%

    Phoenix Contact Automation Worx <= 1.87: stack-based overflow

    PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

    Phoenix Contact Automation Worx Automation Worx Express ICS / OT
  • High 8.8
    CVE-2020-6089

    An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted A…

  • High 7.5
    CVE-2020-4420

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauth…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 8.4
    CVE-2020-4363

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a bu…

    IBM DB2 for Linux, UNIX and Windows Linux Windows