Skip to content
OpenAdvisories

Archive

August 2020

Vulnerabilities first published in this month (UTC), newest first.

← July 2020 2020 / August September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2020-24363 Exploited Public exploit EPSS 22%

    TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDD…

    KEV Sep 2, 2025
  • High 8.8
    CVE-2020-24972 Public exploit

    The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code…

    kleopatra kleopatra Debian Ubuntu
  • High 8.1
    CVE-2020-24616 Public exploit

    Code Injection in jackson-databind

    FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

    jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  • High 7.8
    CVE-2020-9715 Exploited Public exploit EPSS 33%

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
    KEV Apr 13, 2026
  • High 7.5
    CVE-2020-13933 Public exploit EPSS 44%

    Authentication bypass in Apache Shiro

    Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

    shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
  • High 7.8
    CVE-2020-1337 Public exploit EPSS 14%

    Windows Print Spooler Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. A…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • High 8.8
    CVE-2020-13941 Public exploit

    Improper Input Validation in Apache Solr

    Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, r…

    lucene-solr lucene-solr org.apache.solr:solr-parent Debian Ubuntu Maven
  • High 8.0
    CVE-2020-2229 Public exploit

    Jenkins Cross-Site Scripting vulnerability in help icons

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • High 8.0
    CVE-2020-2230 Public exploit EPSS 83%

    Jenkins Cross-site Scripting vulnerability in project naming strategy

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • High 8.4
    CVE-2020-7352 Public exploit

    GOG Galaxy GalaxyClientService Privilege Escalation

    The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively se…

    GOG GOG GalaxyClientService