Skip to content
OpenAdvisories

Archive

22 July 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.…

  • Critical 9.8

    Magento php object injection vulnerability

    Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.

  • Critical 9.6

    Path traversal in Goobi viewer Core

    In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead t…