Skip to content
OpenAdvisories

Archive

4 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /4 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-15109

    Ability to change order address without triggering address validations in solidus

    In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there is an bility to change order address without triggering address validations. This vulnerability allows a malicious customer to craft request data with parameters that allow changing the address of the…

    solidusio solidus solidus_frontend solidus_api RubyGems
  • Medium 6.7
    CVE-2020-15135

    CSRF vulnerability in save-server

    save-server (npm package) before version 1.05 is affected by a CSRF vulnerability, as there is no CSRF mitigation (Tokens etc.). The fix introduced in version version 1.05 unintentionally breaks uploading so version v1.0.7 is the fixed version. This is patche…

    Neztore save-server save-server npm
  • Medium 5.1
    CVE-2020-4631

    IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned acc…

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2020-4525

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 5.4
    CVE-2020-4542

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 5.4
    CVE-2020-4396

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Rhapsody Design Manager
  • Medium 4.3
    CVE-2020-4410

    IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET…

    IBM Rational Rhapsody Design Manager
  • Medium 5.9
    CVE-2020-4459

    IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses…

    IBM Security Secret Server