Skip to content
OpenAdvisories

Archive

23 July 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    DevSpace vulnerable to remote code execution

    The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution.

  • Critical 9.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmwa…

  • Critical 9.8

    This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware versi…