Archive

28 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /28 August 2020 →

All Critical High Medium Low Exploited only Public exploit

86 results · Feed

High 7.5

CVE-2020-6098

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specia…

freediameter freediameter Debian Ubuntu

Jul 28, 2020
Unscored —

CVE-2020-10982

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.

Jul 28, 2020
Unscored —

CVE-2020-10983

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.

Jul 28, 2020
Unscored —

CVE-2020-10984

Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.

Jul 28, 2020
Unscored —

CVE-2020-10985

Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.

Jul 28, 2020
Unscored —

CVE-2020-11474

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.

Jul 28, 2020
High 7.2

CVE-2020-11476

Unrestricted Uploads in Concrete5

Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.

concrete5/concrete5 Packagist

Jul 28, 2020
High 8.8

CVE-2020-13970

Shopware vulnerable to SSRF

Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.

shopware/platform Packagist

Jul 28, 2020
Medium 5.4

CVE-2020-13971

Shopware vulnerable to Cross-site Scripting

In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication.

shopware/platform Packagist

Jul 28, 2020
High 7.5

CVE-2020-13997

Shopware database password is leaked to an unauthenticated users

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.

shopware/platform shopware/core Packagist

Jul 28, 2020
Unscored —

CVE-2020-16094

In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because…

claws-mail claws-mail claws-mail Debian Ubuntu Alpine

Jul 28, 2020
Critical 9.1

CVE-2020-5377 Public exploit EPSS 49%

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.…

Dell Dell Open Manage Server Administrator

Jul 28, 2020
High 8.8

CVE-2020-15416 Public exploit

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

NETGEAR R6700 Network devices

Jul 28, 2020
Medium 6.3

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
Medium 6.5

CVE-2020-10930

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NET…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.8

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10927

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.4

CVE-2020-10928

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10925

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected …

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10926

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.8

CVE-2020-10924 Public exploit EPSS 87%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

NETGEAR R6700 Network devices

Jul 28, 2020
Medium 6.5

CVE-2020-10923 Public exploit EPSS 85%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-15419 EPSS 60%

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

Veeam One

Jul 28, 2020
High 7.5

CVE-2020-15418

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

Veeam One

Jul 28, 2020
High 7.5

CVE-2020-15628

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15627

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15626

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15624

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
Critical 9.8

CVE-2020-15623

This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15621

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15622

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15619

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15617

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15618

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
Critical 9.8

CVE-2020-15615

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
Critical 9.8

CVE-2020-15614

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
Critical 9.8

CVE-2020-15613

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020