Skip to content
OpenAdvisories

Archive

17 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /17 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2020-13260 Public exploit

    A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated…

  • High 8.1
    CVE-2020-24750 Public exploit

    Unsafe Deserialization in jackson-databind

    FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • Unscored —
    CVE-2020-11700 Public exploit

    An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x…

  • Unscored —
    CVE-2020-11699 Public exploit

    An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php wou…

  • Unscored —
    CVE-2020-11698 Public exploit EPSS 73%

    An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snm…

  • Unscored —
    CVE-2020-11804 Public exploit

    An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page m…

  • Unscored —
    CVE-2020-11803 Public exploit

    An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with t…

  • Unscored —
    CVE-2020-0391 Public exploit

    In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor…

    Android
  • Unscored —
    CVE-2020-0394 Public exploit

    In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi…

    Android
  • Unscored —
    CVE-2020-0245 Public exploit

    In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflo…

    Android
  • Unscored —
    CVE-2020-0401 Public exploit

    In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local…

    Android
  • Unscored —
    CVE-2020-0392 Public exploit

    In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to…

    Android
  • Unscored —
    CVE-2020-0381 Public exploit

    In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…

    Android
  • Unscored —
    CVE-2020-0380 Public exploit

    In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …

    Android
  • Unscored —
    CVE-2020-14181 Public exploit Scanner template EPSS 100%

    Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…

    Atlassian Jira Server Web / CMS