Skip to content
OpenAdvisories

Archive

6 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /6 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-15701

    Unhandled exception in apport

    An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed…

    Canonical Apport apport Ubuntu
  • Medium 5.5
    CVE-2020-11937

    Resource exhaustion vulnerability in whoopsie

    In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.

    Canonical whoopsie whoopsie Ubuntu
  • Medium 6.5
    CVE-2020-15136

    Improper authentication in etcd

    In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on endpoints identified in DNS SRV records for a given domain, w…

    etcd-io etcd dgraph etcd Debian Ubuntu Azure Linux Wolfi Go
  • Medium 5.8
    CVE-2020-15115

    No minimum password length in etcd

    etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short passwords, such as those with a length of one. This may allow an attacker to guess or brute-force users' passwords with little computational ef…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux Go
  • Medium 5.5
    CVE-2020-7817

    MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is …

    ACTIVESOFT MyBrowserPlus
  • Medium 6.5
    CVE-2020-13364

    A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0,…