Skip to content
OpenAdvisories

Archive

25 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /25 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-17402

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

    Parallels Desktop
  • Medium 6.0
    CVE-2020-17401

    This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Des…

    Parallels Desktop
  • Medium 6.5
    CVE-2020-17398

    This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4…

    Parallels Desktop
  • Medium 6.5
    CVE-2020-17393

    This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3…

    Parallels Desktop
  • Medium 6.0
    CVE-2020-17394

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

    Parallels Desktop
  • Medium 6.5
    CVE-2020-17391

    This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3…

    Parallels Desktop
  • Medium 6.5
    CVE-2020-7824

    Ericssonlg iPECS Privilege Escalation Vulnerability

    A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnera…

    Ericsson-LG iPCES UCM
  • Medium 6.1
    CVE-2020-14042

    Codiad Cross-site Scripting Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's name $path variable in components/filemanager/class.filemanage…

    codiad/codiad Packagist
  • Medium 6.5
    CVE-2020-17386

    Cellopoint CelloOS - Server-Side Request Forgery (SSRF)

    Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system.

    Cellopoint CelloOS