Skip to content
OpenAdvisories

Archive

August 2020

Vulnerabilities first published in this month (UTC), newest first.

← July 2020 2020 / August September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

    Netlogon Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2020-1493 Public exploit

    Microsoft Outlook Information Disclosure Vulnerability

    An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific user…

    Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Outlook 2016
  • Medium 6.5
    CVE-2019-5591 Exploited · Ransomware Public exploit EPSS 19%

    A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …

    Fortinet Fortinet FortiOS Network devices
    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2020-7374 Public exploit

    Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

    Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack an…

    Documalis Free PDF Scanner Free PDF Editor
  • Medium 5.4
    CVE-2020-2231 Public exploit

    Improper Neutralization of Input During Web Page Generation in Jenkins

    Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven