Skip to content
OpenAdvisories

Archive

2 September 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 8.8
    CVE-2020-14209 Public exploit EPSS 27%

    Dolibarr Unrestricted Upload of File with Dangerous Type

    Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to…

  • Unscored —
    CVE-2020-24028 Public exploit

    ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, passwo…

  • Unscored —
    CVE-2020-24029 Public exploit

    Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can …

  • Unscored —
    CVE-2020-24030 Public exploit

    ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and acces…

  • High 7.5
    CVE-2020-25078 Exploited Public exploit Scanner template EPSS 98%

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticat…

    KEV Aug 5, 2025
  • Unscored —
    CVE-2020-16602 Public exploit

    Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a r…