Skip to content
OpenAdvisories

Archive

21 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /21 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.7
    CVE-2020-5416

    CF clusters with NGINX in front of them may be vulnerable to DoS

    Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send special…

    Cloud Foundry CF Deployment Routing
  • High 8.5
    CVE-2020-5417

    Cloud Controller may allow developers to claim sensitive routes

    Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming …

    Cloud Foundry CF Deployment CAPI
  • High 7.5
    CVE-2020-8623

    A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

    In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulner…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • High 7.5
    CVE-2020-8620

    In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send dat…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • High 7.5
    CVE-2020-8621

    Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c

    In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward …

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • High 8.1
    CVE-2019-11862

    ALEOS SSH Service Allows Traffic Proxying

    The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.

  • High 8.1
    CVE-2019-11855

    ALEOS LAN-Side RPC Server

    An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

  • High 7.3
    CVE-2019-11847

    ALEOS User Root Shell Escalation

    An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

  • High 8.5
    CVE-2020-15147

    Remote Code Execution in Red Discord Bot

    Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By a…

    Cog-Creators Red-DiscordBot red-discordbot PyPI
  • High 8.2
    CVE-2020-15140

    Remote Code Execution in Red Discord Bot

    In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's …

    Cog-Creators Red-DiscordBot red-discordbot PyPI
  • High 8.1
    CVE-2020-7710

    Sandbox Escape

    This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.

    safe-eval npm