Skip to content
OpenAdvisories

Archive

July 2020

Vulnerabilities first published in this month (UTC), newest first.

← June 2020 2020 / July August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

91 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7283 Public exploit

    Privilege Escalation vulnerability in McAfee Total Protection (MTP)

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious …

    McAfee McAfee Total Protection (MTP)
  • High 8.8
    CVE-2020-8163 Public exploit Scanner template EPSS 82%

    Remote code execution via user-provided local names in ActionView

    The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

    rails rails actionview Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2020-15500 Public exploit Scanner template EPSS 12%

    Cross-site scripting in TileServer GL

    An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS.

    tileserver-gl npm
  • Unscored —
    CVE-2020-5903 Public exploit

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross-Site Scripting (XSS) vul…

  • Unscored —
    CVE-2020-13383 Public exploit EPSS 68%

    openSIS through 7.4 allows Directory Traversal.

  • Unscored —
    CVE-2020-13382 Public exploit EPSS 53%

    openSIS through 7.4 has Incorrect Access Control.

  • Unscored —
    CVE-2020-13381 Public exploit EPSS 59%

    openSIS through 7.4 allows SQL Injection.

  • Unscored —
    CVE-2020-15478 Public exploit

    The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.

  • Unscored —
    CVE-2020-15468 Public exploit

    Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.

  • Unscored —
    CVE-2020-14166 Public exploit

    The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows rem…

    Atlassian Jira Service Desk Server and Data Center Web / CMS
  • Critical 9.8
    CVE-2020-5902 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic…

    KEV Nov 3, 2021