Skip to content
OpenAdvisories

Archive

31 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /31 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-15704

    pppd arbitrary file read information disclosure vulnerability

    The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu…

    Canonical ppp ppp Ubuntu
  • Medium 5.3
    CVE-2014-8883

    Directory Traversal in nhouston

    All versions of the static file server module nhouston are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory. ## Recommendation It is recommended that a different module be used, as we…

    nhouston npm
  • Medium 6.5
    GHSA-6qqj-rx4w-r3cj

    CSRF Vulnerability in jquery-ujs

    Versions 1.0.3 and earlier of jquery-ujs are vulnerable to an information leakage attack that may enable attackers to launch CSRF attacks, as it allows attackers to send CSRF tokens to external domains. When an attacker controls the href attribute of an ancho…

    jquery-ujs npm
  • Medium 5.4
    CVE-2020-13828

    Dolibarr stored Cross-Site Scripting (XSS) vulnerability

    Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter;…

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 6.7
    CVE-2020-5419

    RabbitMQ arbitrary code execution using local binary planting

    RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could …

    VMware Tanzu RabbitMQ
  • Medium 6.2
    CVE-2020-4492

    IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a den…

    IBM Spectrum Scale