Skip to content
OpenAdvisories

Archive

9 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /9 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2020-4305

    IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the s…

    IBM InfoSphere Information Server
  • High 8.6
    CVE-2020-15093

    Improper verification of signature threshold in tough

    The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures be…

    awslabs tough tough crates.io
  • High 7.2
    CVE-2020-15092

    Stored XSS in TimelineJS3

    In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheet…

    nuknightlab TimelineJS3 @knight-lab/timelinejs Web / CMS npm
  • High 7.1
    CVE-2020-5366

    Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious u…

    Dell Integrated Dell Remote Access Controller (iDRAC)
  • High 7.4
    CVE-2020-7692

    Improper Authorization

    PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization requ…

    com.google.oauth-client:google-oauth-client google-oauth-client-java google-oauth-client-java Debian Ubuntu Maven
  • High 8.8
    CVE-2020-9377 Exploited EPSS 22%

    D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability on…

    KEV Mar 25, 2022