Skip to content
OpenAdvisories

Archive

31 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /31 August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.7
    CVE-2020-14311

    There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a s…

    The Grub2 Project grub2 grub2 grub2-signed Debian Ubuntu Azure Linux Alpine
  • Medium 5.7
    CVE-2020-14310

    There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at ma…

    The Grub2 Project grub2 grub2 grub2-signed Debian Ubuntu Azure Linux Alpine
  • Medium 5.7
    CVE-2020-5414

    App Autoscaler logs credentials

    VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Ma…

    VMware Tanzu PCF Autoscaling VMware Tanzu Application Service for VMs Operations Manager
  • Medium 6.1
    CVE-2020-15128

    Reliance on Cookies without validation in OctoberCMS

    In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged to. This meant that certain classes of attacks that took advantage of other theoretical vulnerabilities in user facing code (nothing explo…

    October CMS october october/rain Packagist
  • Medium 6.3
    CVE-2020-3462

    Cisco Data Center Network Manager SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-sub…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.3
    CVE-2020-3461

    Cisco Data Center Network Manager Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The vulnerability is due to missing authentication on…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 6.3
    CVE-2020-3377

    Cisco Data Center Network Manager Command Injection Vulnerability

    A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vulnerability is due to insufficient validation of user-suppli…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 4.7
    CVE-2020-3460

    Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because …

    Cisco Cisco Data Center Network Manager Network devices