Skip to content
OpenAdvisories

Archive

19 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /19 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Medium 6.4
    CVE-2020-15119

    DOM-based XSS in auth0-lock

    In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerouslySetInnerHTML is used, the application and its users might be exposed to cross-site scripting (XSS) attacks.

    auth0 lock auth0-lock npm
  • High 7.8
    CVE-2020-8870

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 7.8
    CVE-2020-8869

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 7.8
    CVE-2020-15638

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

    Foxit PhantomPDF
  • Low 3.3
    CVE-2020-15637

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

    Foxit PhantomPDF
  • High 8.1
    CVE-2020-15636

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700,…

    NETGEAR Multiple Routers Network devices
  • High 8.8
    CVE-2020-15635

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700 Network devices
  • Low 3.3
    CVE-2020-15630

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio …

    Foxit Studio Photo
  • High 7.8
    CVE-2020-15629

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • Medium 6.3
    CVE-2020-15634

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700 Network devices
  • High 7.7
    CVE-2020-15143

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service…

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist
  • Critical 9.6
    CVE-2020-15146

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service …

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist
  • Unscored —
    CVE-2020-13825

    A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2020-13826

    A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute a…

  • Unscored —
    CVE-2020-15531

    Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remo…

  • Unscored —
    CVE-2020-15532

    Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air deni…

  • High 7.8
    CVE-2020-15861

    Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

    net-snmp net-snmp Debian Ubuntu
  • Unscored —
    CVE-2020-17456 Public exploit Scanner template EPSS 74%

    SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi p…

  • High 8.0
    CVE-2020-15151

    Observable Timing Discrepancy in OpenMage LTS

    OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. This issue is related to Adobe's CVE-2020-9690. It is patche…

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • Critical 9.9
    CVE-2020-15149

    Account takeover in NodeBB

    NodeBB before version 1.14.3 has a bug introduced in version 1.12.2 in the validation logic that makes it possible to change the password of any user on a running NodeBB forum by sending a specially crafted socket.io call to the server. This could lead to a p…

    NodeBB NodeBB
  • Unscored —
    CVE-2020-23574

    When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the upl…

  • Unscored —
    CVE-2020-14356 Public exploit

    A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-11848

    Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.…

  • Unscored —
    CVE-2020-24368

    Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacke…

    icingaweb2 icingaweb2 Debian Alpine
  • Unscored —
    CVE-2020-9724

    Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation c…

    Adobe Adobe Lightroom
  • Unscored —
    CVE-2020-9723

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9722

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9721

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9720

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9719

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9718

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9717

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9716

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9714

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9712

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9710

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9697

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9696

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9694

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-9693

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader