Skip to content
OpenAdvisories

Archive

23 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /23 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2020-15632

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-8…

    D-Link DIR-842 Network devices
  • High 8.8
    CVE-2020-15633

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-8…

    D-Link Multiple Routers Network devices
  • High 8.0
    CVE-2020-15631

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-…

    D-Link DAP-1860 Network devices
  • High 7.5
    CVE-2020-10922

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE …

    C-MORE HMI EA9
  • High 7.5
    CVE-2020-10918

    This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmwar…

    C-MORE HMI EA9
  • High 8.8
    CVE-2020-15886

    MunkiReport reportdata module SQL injection vulnerability

    A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint.

    munkireport/reportdata Packagist
  • High 8.8
    CVE-2020-15887

    MunkiReport Software Update module is vulnerable to SQL injection

    A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint.

    munkireport/softwareupdate Packagist