Skip to content
OpenAdvisories

Archive

17 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /17 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.4
    CVE-2020-15183

    Reflected XSS leading to RCE in SoyCMS

    SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially …

    inunosinsi soycms
  • High 8.4
    CVE-2020-15182

    Cross-site Request Forgery leading to RCE in SOY CMS

    The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files…

    inunosinsi soycms
  • High 8.1
    CVE-2020-24750 Public exploit

    Unsafe Deserialization in jackson-databind

    FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 8.8
    CVE-2020-13948

    Apache Superset OS Command Injection

    While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application proce…

    apache-superset PyPI
  • High 8.8
    CVE-2020-6113 EPSS 64%

    An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.1…

  • High 8.8
    CVE-2020-6112 EPSS 17%

    An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc…

  • High 8.8
    CVE-2020-6115

    An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitr…

  • High 8.8
    CVE-2020-6116 EPSS 28%

    An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.…