Skip to content
OpenAdvisories

Archive

4 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /4 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Medium 5.3
    CVE-2020-15109

    Ability to change order address without triggering address validations in solidus

    In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there is an bility to change order address without triggering address validations. This vulnerability allows a malicious customer to craft request data with parameters that allow changing the address of the…

    solidusio solidus solidus_frontend solidus_api RubyGems
  • Medium 6.7
    CVE-2020-15135

    CSRF vulnerability in save-server

    save-server (npm package) before version 1.05 is affected by a CSRF vulnerability, as there is no CSRF mitigation (Tokens etc.). The fix introduced in version version 1.05 unintentionally breaks uploading so version v1.0.7 is the fixed version. This is patche…

    Neztore save-server save-server npm
  • Unscored —
    CVE-2020-16847

    Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in…

  • Unscored —
    CVE-2020-16843

    In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic.…

  • Unscored —
    CVE-2020-15943

    An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing privilege check, it is possib…

  • High 8.8
    CVE-2020-13522

    An exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially cra…

  • Unscored —
    CVE-2020-15956 Public exploit EPSS 16%

    ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffe…

  • Unscored —
    CVE-2020-15944

    An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is…

  • Low 3.8
    CVE-2020-13523

    An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially …

  • Unscored —
    CVE-2020-16199

    Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vuln…

  • Unscored —
    CVE-2020-16201

    Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabiliti…

  • Unscored —
    CVE-2020-16203

    Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited…

  • Unscored —
    CVE-2020-16134

    An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Interne…

  • Medium 5.1
    CVE-2020-4631

    IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned acc…

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2020-4525

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 5.4
    CVE-2020-4542

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 5.4
    CVE-2020-4396

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 4.3
    CVE-2020-4410

    IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET…

    IBM Rational Rhapsody Design Manager
  • Medium 5.9
    CVE-2020-4459

    IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses…

    IBM Security Secret Server
  • High 7.8
    CVE-2020-7823

    DaviewIndy Multiple Vulnerabilities

    DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

    HumanTalk Co,Ltd DaviewIndy
  • High 7.8
    CVE-2020-7822

    DaviewIndy Multiple Vulnerabilities

    DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

    HumanTalk Co,Ltd DaviewIndy
  • Unscored —
    CVE-2020-6012

    ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A so…

  • Unscored —
    CVE-2020-15467

    The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authentica…

  • Unscored —
    CVE-2019-20001

    An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to e…

  • Unscored —
    CVE-2020-5617

    Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unau…

    Sky SKYSEA Client View
  • Unscored —
    CVE-2020-5616

    [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Cal…

    PHP Factory [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01]
  • Unscored —
    CVE-2020-5615

    Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver…

    PHP Factory [Calendar01] and [Calendar02]