Skip to content
OpenAdvisories

Archive

19 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /19 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-15146

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service …

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist
  • Critical 9.9
    CVE-2020-15149

    Account takeover in NodeBB

    NodeBB before version 1.14.3 has a bug introduced in version 1.12.2 in the validation logic that makes it possible to change the password of any user on a running NodeBB forum by sending a specially crafted socket.io call to the server. This could lead to a p…

    NodeBB NodeBB