Skip to content
OpenAdvisories

Archive

22 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /22 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-15126

    Information disclosure through Viewer query in parse-server

    In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object.

    parse-community parse-server parse-server npm
  • Medium 6.5
    CVE-2020-4399

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial…

    IBM Verify Gateway (IVG)
  • Medium 6.8
    CVE-2020-4397

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an at…

    IBM Verify Gateway (IVG)
  • Medium 6.2
    CVE-2020-4372

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local us…

    IBM Verify Gateway (IVG)
  • Medium 6.8
    CVE-2020-4385

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, whic…

    IBM Verify Gateway (IVG)
  • Medium 4.0
    CVE-2020-4371

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a…

    IBM Verify Gateway (IVG)
  • Medium 5.1
    CVE-2020-4369

    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a u…

    IBM Verify Gateway (IVG)
  • Medium 6.1
    CVE-2020-9665

    Magento stored cross-site scripting vulnerability

    Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    Adobe Magento magento/core Web / CMS Packagist
  • Medium 5.0
    CVE-2014-1422

    Location service uses cached authorization even after revocation

    In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by…

    Canonical trust-store (Ubuntu RTM) trust-store (Ubuntu)
  • Medium 6.5
    CVE-2020-6506

    Android WebView Universal Cross-site Scripting

    Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine npm
  • Medium 6.4
    CVE-2020-8559 Public exploit

    Privilege escalation from compromised node to cluster

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a ful…

    Kubernetes Kubernetes zot kots Debian Alpine Wolfi Go