Skip to content
OpenAdvisories

Archive

31 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /31 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-5413

    Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit w…

    Spring by VMware Spring Integration org.springframework.integration:spring-integration-core Maven
  • Critical 9.0
    CVE-2019-11286

    JMX Credential Deserialization in GemFire

    VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticate…

    VMware Tanzu VMware Tanzu GemFire for VMs VMware GemFire
  • Critical 9.9
    CVE-2020-3374

    Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availab…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2020-3375

    Cisco SD-WAN Solution Software Buffer Overflow Vulnerability

    A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by send…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2020-3382

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists b…

    Cisco Cisco Data Center Network Manager Network devices