Skip to content
OpenAdvisories

Archive

12 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /12 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2020-16139 Public exploit Scanner template EPSS 80%

    A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the d…

  • Unscored —
    CVE-2020-16138 Public exploit EPSS 21%

    A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remo…

  • Unscored —
    CVE-2020-16137 Public exploit EPSS 19%

    A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to r…

  • Medium 5.3
    CVE-2020-7374 Public exploit

    Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

    Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack an…

    Documalis Free PDF Editor Free PDF Scanner
  • Unscored —
    CVE-2020-17505 Public exploit Scanner template EPSS 82%

    Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter …

  • Unscored —
    CVE-2020-17506 Public exploit Scanner template EPSS 94%

    Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator …

  • Medium 5.4
    CVE-2020-2231 Public exploit

    Improper Neutralization of Input During Web Page Generation in Jenkins

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • High 8.0
    CVE-2020-2229 Public exploit

    Jenkins Cross-Site Scripting vulnerability in help icons

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • High 8.0
    CVE-2020-2230 Public exploit EPSS 83%

    Jenkins Cross-site Scripting vulnerability in project naming strategy

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Critical 9.8
    CVE-2020-17496 Exploited Public exploit Scanner template EPSS 87%

    vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabb…

    KEV Nov 3, 2021