Archive
August 2020
Vulnerabilities first published in this month (UTC), newest first.
42 results · Clear filters · Feed
-
Critical 9.6
ZenTao Pro Command Injection
The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path'…
-
Critical 9.8CVE-2020-13921 EPSS 33%
SQL Injection in Apache SkyWalking
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.