Skip to content
OpenAdvisories

Archive

20 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /20 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2020-15053 Public exploit

    An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time…

  • Unscored —
    CVE-2020-15052 Public exploit

    An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Ali…

  • Medium 6.1
    CVE-2020-7680 Public exploit

    Cross-site Scripting in docsify

    docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after th…

    docsify npm
  • High 7.3
    CVE-2020-12028 Public exploit EPSS 53%

    Rockwell Automation FactoryTalk View SE

    In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enab…

    Rockwell Automation FactoryTalk® View SE ICS / OT
  • Medium 4.3
    CVE-2020-12027 Public exploit EPSS 53%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built …

    Rockwell Automation FactoryTalk® View SE ICS / OT
  • Critical 9.0
    CVE-2020-12029 Public exploit EPSS 47%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell …

    Rockwell Automation FactoryTalk® View SE ICS / OT