Archive

28 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /28 August 2020 →

All Critical High Medium Low Exploited only Public exploit

26 results · Clear filters · Feed

High 7.5

CVE-2020-6098

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specia…

freediameter freediameter Debian Ubuntu

Jul 28, 2020
High 7.2

CVE-2020-11476

Unrestricted Uploads in Concrete5

Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.

concrete5/concrete5 Packagist

Jul 28, 2020
High 8.8

CVE-2020-13970

Shopware vulnerable to SSRF

Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.

shopware/platform Packagist

Jul 28, 2020
High 7.5

CVE-2020-13997

Shopware database password is leaked to an unauthenticated users

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.

shopware/platform shopware/core Packagist

Jul 28, 2020
High 8.8

CVE-2020-15416 Public exploit

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.8

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10927

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.4

CVE-2020-10928

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10925

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected …

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-10926

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

NETGEAR R6700 Network devices

Jul 28, 2020
High 8.8

CVE-2020-10924 Public exploit EPSS 87%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

NETGEAR R6700 Network devices

Jul 28, 2020
High 7.5

CVE-2020-15419 EPSS 60%

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

Veeam One

Jul 28, 2020
High 7.5

CVE-2020-15418

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

Veeam One

Jul 28, 2020
High 7.5

CVE-2020-15628

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15627

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15626

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15624

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15621

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15622

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15619

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15617

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15618

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pa…

CentOS Web Panel CentOS Web Panel

Jul 28, 2020
High 7.5

CVE-2020-15899

Grin insufficient data validation

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

grin crates.io

Jul 28, 2020