Skip to content
OpenAdvisories

Archive

28 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /28 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.6
    CVE-2020-15159

    Cross Site Scripting leading to RCE in baserCMS

    baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFile…

    baserproject basercms baserproject/basercms Packagist
  • High 7.3
    CVE-2020-15155

    Cross-Site Scripting in baserCMS

    baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

    baserproject basercms baserproject/basercms Packagist
  • High 7.3
    CVE-2020-15154

    Cross Site Scripting in baserCMS

    baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_relate…

    baserproject basercms baserproject/basercms Packagist
  • High 7.5
    CVE-2020-9298

    Server-Side Request Forgery in Spinnaker Orca

    The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

    com.netflix.spinnaker.orca:orca-core Maven