Skip to content
OpenAdvisories

Archive

5 July 2020

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.

  • Unscored —

    SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.

  • Unscored —

    SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.

  • Unscored —

    An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur…

  • Unscored —

    An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS ca…

  • Unscored —

    An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a produc…

  • Unscored —

    XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.

  • Unscored —

    SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.

  • Unscored —

    We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

  • Unscored —

    In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/p…

  • Unscored —

    An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or u…

  • Unscored —

    An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a …

  • Unscored —

    An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM …