Skip to content
OpenAdvisories

Archive

16 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /16 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-11982

    Insecure default config of Celery worker in Apache Airflow

    An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deseriali…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Critical 9.8
    CVE-2020-11981 Public exploit Scanner template EPSS 37%

    Command injection via Celery broker in Apache Airflow

    An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Critical 9.8
    CVE-2020-3357

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the de…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.8
    CVE-2020-3331 EPSS 42%

    Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to i…

    Cisco Cisco RV110W Wireless-N VPN Firewall Firmware Network devices
  • Critical 9.8
    CVE-2020-3330

    Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability

    A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system a…

    Cisco Cisco RV110W Wireless-N VPN Firewall Firmware Network devices
  • Critical 9.8
    CVE-2020-3323

    Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper valid…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.8
    CVE-2020-3144

    Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authent…

    Cisco Cisco RV130W Wireless-N Multifunction VPN Router Firmware Network devices
  • Critical 9.8
    CVE-2020-3140

    Cisco Prime License Manager Privilege Escalation Vulnerability

    A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input …

    Cisco Cisco Prime License Manager Network devices
  • Critical 9.8
    CVE-2020-14000

    Remote Code Execution in scratch-vm

    MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code execution because the URL's content is treated as a script and is ex…

    scratch-vm npm