Skip to content
OpenAdvisories

Archive

17 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /17 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2020-15152

    Server-Side Request Forgery in ftp-srv

    ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request Forgery. The PORT command allows arbitrary IPs which can be…

    autovance ftp-srv ftp-srv npm
  • Critical 10.0
    CVE-2020-1467

    Windows Hard Link Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker woul…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2020-7704

    Prototype Pollution

    The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.

    linux-cmdline Linux npm
  • Critical 9.8
    CVE-2020-7703

    Prototype Pollution

    All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function.

    nis-utils npm
  • Critical 9.8
    CVE-2020-7702

    Prototype Pollution

    All versions of package templ8 are vulnerable to Prototype Pollution via the parse function.

    templ8 npm