Skip to content
OpenAdvisories

Archive

23 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /23 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low —
    GHSA-qvhr-55hg-3qwv

    Non-persistent XSS in the Storefront in Shopware

    ### Impact Non-persistent XSS in the Storefront ### Patches We recommend to update to the current version 6.3.1.1. You can get the update to 6.3.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Secur…

    shopware/platform shopware/core Packagist
  • Low —
    GHSA-qvc5-cfrr-384v

    RCE in Third Party Library in Shopware

    ### Impact RCE in Third Party Library ### Patches We recommend to update to the current version 6.3.1.1. You can get the update to 6.3.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin…

    shopware/platform shopware/core Packagist
  • Low —
    GHSA-q3vw-4jx3-rrr2

    personnummer/java vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

    dev.personnummer:personnummer Maven
  • Low —
    GHSA-vp9c-fpxx-744v

    personnummer/ruby vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

    personnummer RubyGems
  • Low 3.1
    CVE-2020-4340

    IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate val…

    IBM Security Secret Server
  • Low 3.5
    CVE-2020-4324

    IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by impro…

    IBM Security Secret Server