Skip to content
OpenAdvisories

Archive

7 August 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.9

    Unauthenticated Information Disclosure Vulnerability in IP Office

    A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0…

  • Medium 6.5
    CVE-2020-5412 Scanner template EPSS 10%

    Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard

    Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboa…

  • Medium 6.1

    outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues

    A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permiss…