Skip to content
OpenAdvisories

Archive

14 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /14 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-9708

    GHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath function

    The resolveRepositoryPath function doesn't properly validate user input and a malicious user may traverse to any valid Git repository outside the repoRoot. This issue may lead to unauthorized access of private Git repositories as long as the malicious user kn…

    Adobe Helix
  • Medium 6.7
    CVE-2020-15145

    Local privilege elevation in Composer-Setup for Windows

    In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user may modify the existing `C:\ProgramData\ComposerSetup\bin\comp…

    composer windows-setup Windows
  • Medium 6.5
    CVE-2019-5591 Exploited · Ransomware Public exploit Scanner template EPSS 19%

    A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …

    Fortinet Fortinet FortiOS Network devices
    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-12648

    Cross-site scripting vulnerability in TinyMCE

    A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.

    tinymce tinymce Ubuntu npm
  • Medium 6.5
    CVE-2020-4662

    IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication …

    IBM Event Streams