Skip to content
OpenAdvisories

Archive

12 August 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 10.0

    Concourse's GitLab auth allows impersonation

    Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. Gi…

  • Critical 9.8

    Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

    asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.

  • Critical 9.0

    SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script conte…

  • Critical 9.8
    CVE-2020-17496 Exploited Public exploit Scanner template EPSS 87%

    vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabb…

    KEV Nov 3, 2021
  • Critical 10.0

    An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Softw…