Skip to content
OpenAdvisories

Archive

24 September 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2020-15160 Public exploit EPSS 11%

    Blind SQL Injection in PrestaShop

    PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8

  • Medium 6.1
    CVE-2020-15930 Public exploit

    Cross-site Scripting in Joplin

    An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

  • Unscored —
    CVE-2020-24365 Public exploit EPSS 11%

    An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic …