Skip to content
OpenAdvisories

Archive

6 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /6 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-7356 Public exploit EPSS 14%

    Cayin xPost SQL Injection

    CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploi…

    CAYIN Technology Cayin xPost
  • Critical 9.6
    CVE-2020-7357 Public exploit EPSS 32%

    Cayin CMS Command Injection

    Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cg…

    CAYIN Technology CAYIN CMS-SE Cayin CMS-40 Cayin CMS
  • Critical 9.6
    CVE-2020-7361 Public exploit EPSS 17%

    ZenTao Pro Command Injection

    The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path'…

    EasyCorp ZenTao Pro
  • High 8.4
    CVE-2020-7352 Public exploit

    GOG Galaxy GalaxyClientService Privilege Escalation

    The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively se…

    GOG GOG GalaxyClientService