Skip to content
OpenAdvisories

Archive

July 2020

Vulnerabilities first published in this month (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.2
    CVE-2020-8218 Exploited Public exploit EPSS 32%

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perfor…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2020-12812 Exploited · Ransomware EPSS 45%

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a u…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-3452 Exploited Public exploit Scanner template EPSS 100%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-11978 Exploited Public exploit Scanner template EPSS 99%

    Remote code execution (RCE) in Apache Airflow

    An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user runnin…

    KEV Jan 18, 2022
  • High 7.8
    CVE-2020-1147 Exploited Public exploit EPSS 96%

    .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-9377 Exploited EPSS 22%

    D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability on…

    KEV Mar 25, 2022