Skip to content
OpenAdvisories

Archive

24 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /24 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2020-10614

    In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision da…

  • Unscored —
    CVE-2020-10604

    In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager …

  • Medium 5.9
    CVE-2020-10600

    OSIsoft PI System

    An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

    OSIsoft PI Data Archive
  • Unscored —
    CVE-2020-10602

    In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager du…

  • Unscored —
    CVE-2020-10606

    In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected…

  • Unscored —
    CVE-2020-10608

    In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity ch…

  • Unscored —
    CVE-2020-10610

    In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to ex…

  • High 7.5
    CVE-2020-12812 Exploited · Ransomware EPSS 45%

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a u…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-8174

    napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

    nodejs nodejs nodejs nodejs-current Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-8175 Public exploit

    Uncontrolled resource consumption in jpeg-js

    Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.

    jpeg-js npm
  • Unscored —
    CVE-2020-8207

    Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code ex…

    Windows
  • Unscored —
    CVE-2020-15945

    Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) be…

    lua5.4 lua lua5.3 Debian Azure Linux Wolfi
  • Medium 4.9
    CVE-2020-14725

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

    Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  • Unscored —
    CVE-2020-15932

    Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges.

  • High 7.3
    CVE-2020-8326

    An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that co…

    Lenovo Drivers Management
  • High 7.3
    CVE-2020-8317

    A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could all…

    Lenovo Drivers Management
  • Unscored —
    CVE-2020-15860

    Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an…

  • Medium 6.5
    CVE-2020-14297

    Wildfly EJB Client causes DoS

    A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and…

    Red Hat wildfly org.jboss:jboss-ejb-client Maven
  • Unscored —
    CVE-2020-14175

    Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or Jav…

    Atlassian Confluence Server Web / CMS
  • Unscored —
    CVE-2020-15918

    Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0.

  • Unscored —
    CVE-2020-15919

    A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.

  • Unscored —
    CVE-2020-15920 Public exploit Scanner template EPSS 98%

    There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execut…

  • Unscored —
    CVE-2020-15921 Public exploit EPSS 18%

    Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restri…

  • Unscored —
    CVE-2020-15922 Public exploit EPSS 57%

    There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE…

  • Unscored —
    CVE-2020-15923

    Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.

  • Unscored —
    CVE-2020-15924

    There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is re…

  • High 7.8
    CVE-2020-15778 Public exploit EPSS 14%

    scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick chara…

    openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-14307

    A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where Ses…

    Red Hat wildfly