Skip to content
OpenAdvisories

Archive

18 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /18 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2020-23934 Public exploit EPSS 16%

    An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php…

  • Unscored —
    CVE-2020-15926

    Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct…

  • Medium 6.7
    CVE-2020-5385

    Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escal…

    Dell Dell Encryption Enterprise
  • Unscored —
    CVE-2020-24032 Public exploit

    tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metachara…

  • Unscored —
    CVE-2020-15865

    A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode…

  • Medium 5.3
    CVE-2020-9415

    TIBCO Data Virtualization

    The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary fil…

    TIBCO Software TIBCO Data Virtualization TIBCO Data Virtualization for AWS Marketplace
  • Unscored —
    CVE-2019-6258

    D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a …

  • Medium 6.5
    CVE-2020-7019

    Improper privilege management in elasticsearch

    In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be …

    Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  • Unscored —
    CVE-2020-7018

    Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is giv…

    Elastic Elastic Enterprise Search elasticsearch Ubuntu
  • Unscored —
    CVE-2020-14936

    Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP r…

  • Unscored —
    CVE-2020-14935

    Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function…

  • Unscored —
    CVE-2020-14934

    Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SN…

  • Unscored —
    CVE-2020-14937

    Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/dec…

  • Critical 9.8
    CVE-2020-7708

    Prototype Pollution

    The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.

    irrelon-path @irrelon/path npm
  • Critical 9.8
    CVE-2020-7707

    Prototype Pollution

    The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.

    property-expr npm
  • Medium 6.3
    CVE-2020-14333

    A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable pa…

    The ovirt Project ovirt-engine
  • Critical 9.8
    CVE-2020-7706

    Prototype Pollution

    The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.

    connie-lang npm