Skip to content
OpenAdvisories

Archive

20 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /20 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-24359

    Improper Input Validation in vault-ssh-helper

    HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP address assigned to that interface. Fixed in 0.2.0.

    github.com/hashicorp/vault-ssh-helper Go
  • High 8.1
    CVE-2020-10283

    RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication

    The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however according to its documentation, in order to maintain backwards compatibility, GCS and autopilot negotiate the version via the AUTOPILOT_VERSION message…

    PX4 MAVLink
  • High 8.0
    CVE-2020-10289

    RVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132

    Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this fla…

    Open Robotics ros ros-actionlib ros-actionlib Debian Ubuntu