Skip to content
OpenAdvisories

Archive

26 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /26 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical —
    GHSA-r587-7jh2-4qr3

    Server secret was included in static assets and served to clients

    ### Impact Server JWT signing secret was included in static assets and served to clients. This ALLOWS Flood's builtin authentication to be bypassed. Given Flood is granted access to rTorrent's SCGI interface (which is unprotected and ALLOWS arbitrary code exe…

    flood npm
  • Critical 9.8
    CVE-2020-3446

    Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnerability

    A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appliances could allow an unauthenticated, remote attacker to l…

    Cisco Cisco Wide Area Application Services (WAAS) Network devices
  • Critical 9.6
    CVE-2020-14498

    HMS Industrial Networks AB eCatcher Stack-based Buffer Overflow

    HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

    HMS Industrial Networks eCatcher