Skip to content
OpenAdvisories

Archive

24 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /24 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

99 results · Feed

  • Critical 9.8
    CVE-2020-13501

    An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.…

  • Unscored —
    CVE-2020-24365 Public exploit EPSS 11%

    An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic …

  • Critical 9.8
    CVE-2020-13500

    SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2…

  • Critical 9.8
    CVE-2020-13499

    An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.…

  • Unscored —
    CVE-2020-13505

    Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP …

  • Unscored —
    CVE-2020-13504

    Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafte…

  • Unscored —
    CVE-2020-26088

    A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-16147

    The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticate…

  • Unscored —
    CVE-2020-16148

    The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shel…

  • Medium 4.9
    CVE-2020-12811

    A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow att…

    Fortinet FortiManager FortiAnalyzer Network devices
  • Unscored —
    CVE-2020-12815

    An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker…

    Fortinet Fortinet FortiTester Network devices
  • Unscored —
    CVE-2020-12817

    An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authentica…

    Fortinet Fortinet FortiAnalyzer Network devices
  • Unscored —
    CVE-2020-12818

    An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker …

    Fortinet Fortinet FortiOS Network devices
  • Unscored —
    CVE-2020-12816

    An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to…

    Fortinet Fortinet FortiNAC Network devices
  • Unscored —
    CVE-2020-22453

    Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.

  • Unscored —
    CVE-2020-6020

    Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30…

  • Unscored —
    CVE-2020-24560

    An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family …

    Trend Micro Trend Micro Security (Consumer)
  • Unscored —
    CVE-2020-15604

    An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family …

    Trend Micro Trend Micro Security (Consumer)
  • Unscored —
    CVE-2015-4719

    The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a cr…