Skip to content
OpenAdvisories

Archive

August 2020

Vulnerabilities first published in this month (UTC), newest first.

← July 2020 2020 / August September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

50 results · Clear filters · Feed

  • Unscored —
    CVE-2020-0108 Public exploit

    In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an unca…

    Android
  • Unscored —
    CVE-2020-14979 Public exploit

    The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low …

  • Unscored —
    CVE-2020-9529 Public exploit

    Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions…

  • Unscored —
    CVE-2020-11984 Public exploit Scanner template EPSS 90%

    Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

    apache2 apache2 apache2 uwsgi Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2020-7356 Public exploit EPSS 14%

    Cayin xPost SQL Injection

    CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploi…

    CAYIN Technology Cayin xPost
  • Critical 9.6
    CVE-2020-7357 Public exploit EPSS 32%

    Cayin CMS Command Injection

    Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cg…

    CAYIN Technology CAYIN CMS-SE Cayin CMS-60 Cayin CMS-20
  • Critical 9.6
    CVE-2020-7361 Public exploit EPSS 17%

    ZenTao Pro Command Injection

    The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path'…

    EasyCorp ZenTao Pro
  • High 8.4
    CVE-2020-7352 Public exploit

    GOG Galaxy GalaxyClientService Privilege Escalation

    The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively se…

    GOG GOG GalaxyClientService
  • Unscored —
    CVE-2020-13151 Public exploit EPSS 87%

    Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs…

  • Unscored —
    CVE-2020-15956 Public exploit EPSS 16%

    ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffe…