Skip to content
OpenAdvisories

Archive

20 July 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3

    Command injection in codecov (npm package)

    In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability. Clients of the codecov-node library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. A similar CVE (CVE…

  • Critical 9.0
    CVE-2020-12029 Public exploit EPSS 47%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell …