Skip to content
OpenAdvisories

Archive

6 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /6 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2020-9395

    An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based b…

  • Medium 6.5
    CVE-2019-14900 Public exploit

    SQL Injection in Hibernate ORM

    A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw c…

    org.hibernate:hibernate-core fuse Azure Linux Maven
  • Unscored —
    CVE-2020-1839

    HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timin…

  • Unscored —
    CVE-2020-1836

    HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160…

  • Unscored —
    CVE-2020-9226

    HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. T…

  • Unscored —
    CVE-2020-9261

    HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability. The system does …

  • Unscored —
    CVE-2020-1838

    HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability.…

  • Unscored —
    CVE-2020-9262

    HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condi…

  • Unscored —
    CVE-2020-10760

    A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in…

    samba samba samba Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-6013

    ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the…

  • High 8.6
    CVE-2020-5372

    Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to extern…

    Dell PowerStore
  • High 8.0
    CVE-2020-5371

    Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulne…

    Dell Isilon OneFS
  • Critical 9.8
    CVE-2020-5368

    Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated…

    Dell VxRail
  • High 7.7
    CVE-2020-5356

    Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain a…

    Dell Power Protect Data Manager
  • High 8.8
    CVE-2020-5352

    Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticate…

    Dell Data Protection Advisor
  • Unscored —
    CVE-2019-8252

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8249

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8250

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8066

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8251

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-1837

    ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The devic…

  • Unscored —
    CVE-2020-9100

    Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is l…

  • Unscored —
    CVE-2020-14303

    A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samb…

    samba samba samba Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-15570

    The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allow…

    whoopsie Ubuntu
  • Unscored —
    CVE-2020-15569

    PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.

    milkytracker milkytracker Debian Ubuntu
  • Medium 6.1
    CVE-2020-7690

    Cross-site scripting in jspdf

    All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

    jspdf npm
  • Medium 6.3
    CVE-2020-7691

    Cross-site Scripting (XSS)

    In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.

    jspdf npm
  • Unscored —
    CVE-2020-15562

    An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS …

    roundcube roundcube Debian Ubuntu