Skip to content
OpenAdvisories

Archive

23 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /23 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium —
    GHSA-wvh7-5p38-2qfc

    Storing Password in Local Storage

    The `setPassword` method (http://parseplatform.org/Parse-SDK-JS/api/2.9.1/Parse.User.html#setPassword) stores the user's password in localStorage as raw text making it vulnerable to anyone with access to your localStorage. We believe this is the only time tha…

    parse npm
  • Medium 5.5
    CVE-2020-8557

    Kubernetes node disk Denial of Service by writing to container /etc/hosts

    The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction m…

    Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go
  • Medium 5.4
    CVE-2020-4447

    IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to e…

    IBM FileNet Content Manager
  • Medium 5.9
    CVE-2020-10919

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA…

    C-MORE HMI EA9
  • Medium 5.9
    CVE-2019-11252

    Credential leakage when failing to mount

    The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.

    Kubernetes Kubernetes kubernetes Debian
  • Medium 6.1
    CVE-2020-15881

    MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

    A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.

    munkireport/munki_facts Packagist
  • Medium 6.1
    CVE-2020-15883

    MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability

    A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (through which installed packages names and versions are reporte…

    munkireport/managedinstalls Packagist
  • Medium 5.4
    CVE-2020-15885

    MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment

    A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment.

    munkireport/comment Packagist