Skip to content
OpenAdvisories

Archive

21 July 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-15873 Public exploit

    LibreNMS SQL Injection vulnerability

    In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

  • Unscored —
    CVE-2020-12432 Public exploit

    The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to …