Archive
15 July 2020
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
Unscored —CVE-2020-15780 Public exploit
An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI t…
-
Unscored —
Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allo…
-
Unscored —CVE-2020-15051 Public exploit
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Ad…
-
Unscored —CVE-2020-14066 Public exploit
IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to acce…
-
Unscored —CVE-2020-14065 Public exploit
IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.
-
Unscored —CVE-2020-14064 Public exploit
IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.
-
Unscored —
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php s…
-
Unscored —CVE-2020-15716 Public exploit
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php scri…
-
Medium 6.6CVE-2020-2969 Public exploit
Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, …
-
Critical 9.8
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
KEV Sep 18, 2024 -
Critical 9.8
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
High 7.4CVE-2020-8203 Public exploit
Prototype Pollution in lodash
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
-
Unscored —
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
-
Medium 4.1CVE-2020-2978 Public exploit
Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that …