Skip to content
OpenAdvisories

Archive

11 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /11 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2020-17495

    django-celery-results Stores Sensitive Information In Cleartext

    django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

    django-celery-results python-django-celery-results python-django-celery-results Debian Ubuntu PyPI
  • High —
    GHSA-j7wp-vjj6-cp5m

    Cross-Site Scripting in @progress/kendo-angular-editor

    Kendo UI for Angular Editor Component (npm package @progress/kendo-angular-editor) before version 1.2.3 is vulnerable to Cross-Site Scripting. When the Editor content contains potentially malicious scripts in element event handlers, they get executed. Adding …

    @progress/kendo-angular-editor npm
  • High 7.5
    CVE-2020-11976

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket

    By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML template that is usually removed during rendering. Affected are Apache Wicket versions…

    org.apache.wicket:wicket-core Maven
  • High 8.1
    CVE-2020-4486

    IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw a…

    IBM QRadar Wincollect