Skip to content
OpenAdvisories

Archive

11 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /11 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2020-7029

    Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability

    A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web ad…

    Avaya Avaya Aura Communication Manager Avaya Aura Messaging
  • Medium 6.8
    CVE-2019-17339

    TIBCO Silver Fabric XSS vulerability

    The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker could theoretically social engineer an authenticated user into submitting the URL,…

    TIBCO Software TIBCO Silver Fabric
  • Medium 5.6
    CVE-2020-8911

    CBC padding oracle in AWS S3 Crypto SDK for GoLang

    A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code (MAC), which then allows an attacker who has write access to the…

    Google AWS S3 Crypto SDK for GoLang zot kots Wolfi Go
  • Medium 6.3
    CVE-2020-8918

    TPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper

    An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect b…

    Google google/go-tpm library github.com/google/go-tpm Go
  • Medium 4.3
    GHSA-q6j3-c4wc-63vw

    CSRF tokens leaked in URL by canned query form

    ### Impact The HTML form for a read-only canned query includes the hidden CSRF token field added in #798 for writable canned queries (#698). This means that submitting those read-only forms exposes the CSRF token in the URL - for example on https://latest.dat…

    datasette PyPI
  • Medium 6.5
    CVE-2020-4485

    IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an a…

    IBM QRadar Wincollect