Skip to content
OpenAdvisories

Archive

7 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /7 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    GHSA-mm44-wc5p-wqhq

    Denial of service due to reference expansion in versions earlier than 4.0

    ### Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denia…

    com.upokecenter:cbor Maven
  • High 8.8
    CVE-2020-15515

    Remote code execution in turn extension for TYPO3

    The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.

    marcwillmann/turn Packagist
  • High 7.8
    CVE-2020-4076

    Context isolation bypass via leaked cross-context objects in Electron

    In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using contextIsolation ar…

    electron electron electron npm
  • High 7.7
    CVE-2020-4077

    Context isolation bypass via contextBridge in Electron

    In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using both `contextIsolat…

    electron electron electron npm