Skip to content
OpenAdvisories

Archive

1 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /1 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Medium 6.4
    CVE-2020-6130

    SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_peri…

  • Medium 6.4
    CVE-2020-6129

    SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_peri…

  • Medium 6.5
    CVE-2018-12475

    obs-service-download_files allows downloading from localhost or intranet hosts

    A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is…

    openSUSE open build service open-build-service Ubuntu
  • Medium 6.6
    CVE-2020-12776

    Openfind Mail2000 - Broken Access Control

    Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.

    Openfind MAIL2000