Skip to content
OpenAdvisories

Archive

30 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /30 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2020-24104

    XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials wi…

  • High 8.1
    CVE-2020-8097

    Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)

    An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: …

    Bitdefender Endpoint Security SDK Endpoinit Security Tools for Windows Windows
  • Unscored —
    CVE-2020-24223 Public exploit Scanner template EPSS 15%

    Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

  • Unscored —
    CVE-2020-24917

    osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.ph…

  • Unscored —
    CVE-2020-14352

    A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to…

  • Medium 6.5
    CVE-2020-8244

    Remote Memory Exposure in bl

    A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking …

    bl node-bl node-bl Debian Ubuntu npm
  • High 7.2
    CVE-2020-7712

    Command Injection

    This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

    org.webjars.npm:json json npm Maven