Skip to content
OpenAdvisories

Archive

30 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /30 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High —
    CVE-2020-16164

    Vulnerability in RPKI manifest validation

    An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin …

    net.ripe.rpki:rpki-validator-3 Maven
  • High 7.5
    CVE-2020-15130

    False-positive validity for NFT1 genesis transactions in SLPJS

    In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child…

    simpleledger slpjs slpjs npm
  • High 7.5
    CVE-2020-15131

    False-positive validity for NFT1 genesis transactions in SLP Validate

    In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly val…

    simpleledger slp-validate.js slp-validate npm
  • High 7.8
    CVE-2020-7828

    DaviewIndy Heap-based Buffer Overflow Vulnerability

    DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

    HumanTalk Co,Ltd DavieIndy
  • High 7.8
    CVE-2020-7829

    DaviewIndy Heap-based Buffer Overflow Vulnerability

    DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

    HumanTalk Co,Ltd DavieIndy
  • High 7.8
    CVE-2020-7827

    DaviewIndy Use-After-Free Vulnerability

    DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

    HumanTalk Co,Ltd DavieIndy
  • High 7.2
    CVE-2020-8218 Exploited Public exploit EPSS 32%

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perfor…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2020-7699 Public exploit

    Prototype Pollution

    This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.

    express-fileupload npm