Skip to content
OpenAdvisories

Archive

7 August 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.1

    Cross-Site Scripting in Prism

    Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v…

  • High 8.8

    HandySoft ActiveX File Download and Execution Vulnerability

    hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in th…

  • High 8.4

    inn: non-root owned files

    A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15…