Skip to content
OpenAdvisories

Archive

17 August 2020

Vulnerabilities first published on this day (UTC), newest first.

169 results · Feed

  • Unscored —

    HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a special scenario, the sys…

  • Unscored —

    FusionCompute 8.0.0 have a command injection vulnerability. The software does not sufficiently validate certain paramet…

  • Critical 9.8

    Prototype Pollution

    All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function.

  • Critical 9.8

    Prototype Pollution

    All versions of package templ8 are vulnerable to Prototype Pollution via the parse function.

  • Unscored —

    An issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in the SVCManejador.svc web…

  • Medium 6.8

    IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform…

  • High 8.8
    CVE-2020-13941 Public exploit

    Improper Input Validation in Apache Solr

    Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, r…

  • Medium 5.5
    CVE-2020-1493 Public exploit

    Microsoft Outlook Information Disclosure Vulnerability

    An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific user…

  • Unscored —
    CVE-2020-24370 Public exploit

    ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by ge…