Skip to content
OpenAdvisories

Archive

August 2020

Vulnerabilities first published in this month (UTC), newest first.

42 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-7361 Public exploit EPSS 17%

    ZenTao Pro Command Injection

    The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path'…

  • Critical 9.8
    CVE-2020-13921 EPSS 33%

    SQL Injection in Apache SkyWalking

    **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.