Skip to content
OpenAdvisories

Archive

12 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /12 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 4.1
    CVE-2020-7301

    DLP ePO extension - Cross site scripting

    Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

    McAfee DLP ePO extension
  • Medium 4.6
    CVE-2020-7300

    DLP ePO extension - Improper Authorization

    Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

    McAfee DLP ePO extension
  • Medium 6.4
    CVE-2020-8904

    Arbitrary trusted memory overwrite vulnerability in Asylo

    An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to…

    Google Asylo
  • Medium 5.3
    CVE-2020-7374 Public exploit

    Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

    Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack an…

    Documalis Free PDF Editor Free PDF Scanner
  • Medium 5.5
    CVE-2020-15137

    Integer overflow in HoRNDIS

    All versions of HoRNDIS are affected by an integer overflow in the RNDIS packet parsing routines. A malicious USB device can trigger disclosure of unrelated kernel memory to userspace applications on the host, or can cause the kernel to crash. Kernel memory d…

    jwise HoRNDIS
  • Medium 5.5
    CVE-2020-13288

    In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page

    GitLab GitLab Web / CMS
  • Medium 6.1
    CVE-2020-13278

    Reflected cross-site scripting in francoisjacquet/rosariosis

    Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request.

    RosarioSIS RosarioSIS francoisjacquet/rosariosis Packagist
  • Medium 4.3
    CVE-2020-6310

    Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions…

    SAP SAP NetWeaver ABAP Server and ABAP Platform
  • Medium 5.4
    CVE-2020-6301

    SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unautho…

    SAP SAP ERP (HCM Travel Management)
  • Medium 4.8
    CVE-2020-6300

    SAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2, 4.3, allows an attacke…

    SAP SAP Business Objects Business Intelligence Platform (Central Management Console)
  • Medium 4.3
    CVE-2020-6299

    SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to …

    SAP SAP NetWeaver ABAP Server and ABAP Platform
  • Medium 6.3
    CVE-2020-6297

    Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to…

    SAP SAP Data Intelligence
  • Medium 4.3
    CVE-2020-2237

    CSRF vulnerability in Jenkins Flaky Test Handler Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.

    Jenkins Project Jenkins Flaky Test Handler Plugin org.jenkins-ci.plugins:flaky-test-handler Web / CMS Maven
  • Medium 4.3
    CVE-2020-2233

    Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs

    A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

    Jenkins Project Jenkins Pipeline Maven Integration Plugin org.jenkins-ci.plugins:pipeline-maven Web / CMS Maven
  • Medium 5.4
    CVE-2020-2231 Public exploit

    Improper Neutralization of Input During Web Page Generation in Jenkins

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2020-6273

    SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization chec…

    SAP SAP S/4 HANA (Fiori UI for General Ledger Accounting)
  • Medium 5.4
    CVE-2020-16266

    MantisBT XSS issue on the view_all_bug_page.php

    An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attacker to inject arbitrary HTML into the page by saving it into a text Custom Field, leading to possible code execution in the browser of any u…

    mantisbt/mantisbt Packagist