Skip to content
OpenAdvisories

Archive

13 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /13 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Medium —
    GHSA-7xcx-6wjh-7xp2

    Command Injection in standard-version

    # GitHub Security Lab (GHSL) Vulnerability Report: `GHSL-2020-111` The [GitHub Security Lab](https://securitylab.github.com) team has identified a potential security vulnerability in [standard-version](https://github.com/conventional-changelog/standard-versio…

    standard-version npm
  • Unscored —
    CVE-2020-14300

    The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA…

  • Unscored —
    CVE-2020-14298

    The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorre…

  • Unscored —
    CVE-2020-15050 Public exploit Scanner template EPSS 51%

    An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary f…

  • Critical 9.8
    CVE-2020-10987 Exploited Public exploit Scanner template EPSS 80%

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary …

    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-10989

    An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to e…

  • Unscored —
    CVE-2020-10988

    A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticate…

  • Unscored —
    CVE-2020-10986

    A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to …

  • Medium 5.5
    CVE-2019-19338

    A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel C…

    [UNKNOWN] Linux Kernel linux-azure linux-hwe-edge Linux Ubuntu
  • Unscored —
    CVE-2020-5766 Scanner template

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin …

    Web / CMS
  • Unscored —
    CVE-2020-11749 Public exploit EPSS 16%

    Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator…

  • Medium 5.9
    CVE-2019-4591

    IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to …

    IBM Maximo Asset Management
  • Unscored —
    CVE-2020-15689

    Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header t…

  • Unscored —
    CVE-2019-20901

    The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attacker…

    Atlassian Jira Server Web / CMS
  • Unscored —
    CVE-2020-14174

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project v…

    Atlassian Jira Server Web / CMS
  • Unscored —
    CVE-2019-20900

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

    Atlassian Jira Server Web / CMS
  • Unscored —
    CVE-2019-20899

    The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unres…

    Atlassian Jira Server Web / CMS
  • Unscored —
    CVE-2019-20898

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information witho…

    Atlassian Jira Server Web / CMS
  • Unscored —
    CVE-2019-20897

    The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achi…

    Atlassian Jira Server Web / CMS
  • Medium 5.5
    CVE-2019-20907

    In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine