Skip to content
OpenAdvisories

Archive

21 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /21 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-8624

    update-policy rules of type "subdomain" are enforced incorrectly

    In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a sp…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-8622

    A truncated TSIG response can lead to an assertion failure

    In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, co…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-24591

    The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manag…

  • Medium 5.7
    CVE-2019-11858

    ALEOS Multiple Web UI vulnerabilities

    Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9.

  • Medium 6.0
    CVE-2019-11859

    ALEOS SMS Handler Buffer Overflow

    A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root.

  • Medium 4.1
    CVE-2019-11848

    ALEOS AT Command API Abuse

    An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

  • Medium 6.3
    CVE-2019-11850

    ALEOS AT Command Stack Overflow

    A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution

  • Medium 6.3
    CVE-2019-11849

    ALEOS AT API Stack Overflow

    A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

  • Medium 6.5
    CVE-2020-14201

    Dolibarr CRM allows Privilege Escalation

    Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 6.8
    CVE-2020-10290

    RVD#1495: Universal Robots URCaps execute with unbounded privileges

    Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our …

    Universal Robots URx
  • Medium 6.5
    CVE-2020-7923

    Specific GeoQuery can cause DoS against MongoDB Server

    A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoD…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 4.9
    CVE-2020-16239

    Philips SureSigns VS4 Improper Authentication

    When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct.

    Philips SureSigns VS4
  • Medium 6.3
    CVE-2020-16241

    Philips SureSigns VS4 Improper Access Control

    Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

    Philips SureSigns VS4
  • Medium 5.3
    CVE-2020-14518

    Philips DreamMapper Insertion of Sensitive Information into Log File

    Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.

    Philips DreamMapper
  • Medium 6.9
    CVE-2020-7310

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer

    Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operation…

    McAfee McAfee Total Protection (MTP) Trial
  • Medium 6.2
    CVE-2020-15858

    Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate att…