Skip to content
OpenAdvisories

Archive

24 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /24 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.1
    CVE-2020-7377

    Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module

    The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system wh…

    Rapid7 Metasploit Framework
  • High 7.1
    CVE-2020-7376

    Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

    The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module …

    Rapid7 Metasploit Framework
  • High 7.1
    CVE-2020-7705

    Malicious Package

    This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral …

  • High 8.6
    CVE-2020-24606

    Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CP…

    squid squid3 squid squid Debian Ubuntu Alpine
  • High 8.8
    CVE-2020-14043

    Codiad CSRF Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/…

    codiad/codiad Packagist
  • High 7.2
    CVE-2020-14044

    Codiad SSRF Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to make the server request any URL via components/market/class…

    codiad/codiad Packagist
  • High 8.4
    CVE-2020-4587

    IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, cau…

    IBM Sterling Connect Direct for Unix Connect:Direct for UNIX
  • High 8.8
    CVE-2020-7831

    A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to …

    Inogard Co,,LTD Ebiz4u CViewer Object AxECM.dll