Skip to content
OpenAdvisories

Archive

31 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /31 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.4
    CVE-2020-5384

    Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerabi…

    Dell RSA Authentication Agent for Microsoft Windows Windows
  • High 8.0
    CVE-2020-15133

    Missing TLS certificate verification in Faye Websocket

    In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine to implement the TLS handshake whenever a `wss:` URL is used…

    faye faye-websocket faye-websocket ruby-faye-websocket Debian Ubuntu RubyGems
  • High 8.0
    CVE-2020-15134

    Missing TLS certificate verification in Faye

    Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes. Faye uses em-http-request and faye-websocket in the Ruby version of its client. Those libraries both use the `EM::Connection#start_tls` method in EventMachine to impleme…

    faye faye faye ruby-faye Debian Ubuntu RubyGems
  • High 7.3
    CVE-2020-3376

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device. The vulnerability is due to a failure i…

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.8
    CVE-2020-3383

    Cisco Data Center Network Manager Path Traversal Vulnerability

    A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of pat…

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.2
    CVE-2020-3384

    Cisco Data Center Network Manager Command Injection Vulnerability

    A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerabili…

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.8
    CVE-2020-3386

    Cisco Data Center Network Manager Improper Authorization Vulnerability

    A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient…

    Cisco Cisco Data Center Network Manager Network devices