Skip to content
OpenAdvisories

Archive

14 September 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2020-11881 Public exploit

    An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated r…

  • Critical 9.8
    CVE-2019-0230 Public exploit Scanner template EPSS 97%

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts

    Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

  • High 7.5
    CVE-2020-25540 Public exploit Scanner template EPSS 75%

    ThinkAdmin directory traversal vulnerability

    ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.