Skip to content
OpenAdvisories

Archive

15 July 2020

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2020-15780 Public exploit

    An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI t…

  • Unscored —
    CVE-2020-8958 Public exploit EPSS 46%

    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allo…

  • Unscored —
    CVE-2020-15051 Public exploit

    An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Ad…

  • Unscored —
    CVE-2020-14066 Public exploit

    IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to acce…

  • Unscored —
    CVE-2020-14065 Public exploit

    IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.

  • Unscored —
    CVE-2020-14064 Public exploit

    IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.

  • Unscored —
    CVE-2020-15718 Public exploit Scanner template

    RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php s…

  • Unscored —
    CVE-2020-15716 Public exploit

    RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php scri…

  • Medium 6.6
    CVE-2020-2969 Public exploit

    Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, …

  • Critical 9.8
    CVE-2020-14644 Exploited Public exploit Scanner template EPSS 95%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2020-14645 Public exploit EPSS 47%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  • High 7.4
    CVE-2020-8203 Public exploit

    Prototype Pollution in lodash

    Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

  • Unscored —
    CVE-2020-9496 Public exploit Scanner template EPSS 99%

    XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

  • Medium 4.1
    CVE-2020-2978 Public exploit

    Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that …