Skip to content
OpenAdvisories

Archive

13 August 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.4

    Philips SmartControl DLL Hijacking

    An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticated user to escalate privileges by placing a specially crafted DLL file in the search path. This issu…

  • High 7.3

    For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference numb…

  • High 7.3

    For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone …

  • High 8.1

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the …

  • High 7.6

    DLP ePO extension - Cross-site request forgery

    Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.