Skip to content
OpenAdvisories

Archive

22 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /22 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-15839

    Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP

    Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action, which allows remote authenticated users to conduct denial-of-service attacks by uploading large fil…

    com.liferay.portal:release.dxp.bom Maven
  • Medium 5.9
    CVE-2020-4622

    IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it u…

    IBM Data Risk Manager
  • Medium 5.3
    CVE-2020-4619

    IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated…

    IBM Data Risk Manager
  • Medium 5.5
    CVE-2020-4618

    IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input val…

    IBM Data Risk Manager
  • Medium 5.3
    CVE-2020-4616

    IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially craft…

    IBM Data Risk Manager
  • Medium 5.4
    CVE-2020-4615

    IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…

    IBM Data Risk Manager
  • Medium 5.9
    CVE-2020-4613

    IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to d…

    IBM Data Risk Manager
  • Medium 4.3
    CVE-2020-4612

    IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially …

    IBM Data Risk Manager