Skip to content
OpenAdvisories

Archive

19 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /19 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Unscored —
    CVE-2020-25790 Public exploit EPSS 16%

    Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP arch…

  • Unscored —
    CVE-2020-25787 Public exploit EPSS 18%

    An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requestin…

    tt-rss tt-rss Debian Ubuntu
  • High 8.7
    CVE-2020-5421 Public exploit EPSS 12%

    RFD Protection Bypass via jsessionid

    In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid pa…

    Spring by VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven