Skip to content
OpenAdvisories

Archive

25 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /25 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

112 results · Feed

  • Unscored —
    CVE-2020-26109

    cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557).

  • Unscored —
    CVE-2020-26110

    cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).

  • Unscored —
    CVE-2020-26111

    cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).

  • Unscored —
    CVE-2020-26112

    The email quota cache in cPanel before 90.0.10 allows overwriting of files.

  • Unscored —
    CVE-2020-26113

    cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).

  • Unscored —
    CVE-2020-26114

    cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).

  • Unscored —
    CVE-2020-26115

    cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).

  • Unscored —
    CVE-2020-25625

    hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-25085

    QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a writ…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-25084

    QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-25203

    The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By ca…

  • Unscored —
    CVE-2020-23837

    A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attack…

  • Unscored —
    CVE-2020-24718

    bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 202…

  • Unscored —
    CVE-2020-24595

    Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensi…

  • Unscored —
    CVE-2020-24594

    Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due…

  • Unscored —
    CVE-2020-24593

    Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and acce…

  • Unscored —
    CVE-2020-24592

    Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system in…

  • Unscored —
    CVE-2020-24692

    The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary script…

  • Unscored —
    CVE-2020-24621

    A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.1…

  • Unscored —
    CVE-2020-24615

    Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.

  • Unscored —
    CVE-2020-13387

    Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.

  • Unscored —
    CVE-2020-12824

    Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP.

  • Unscored —
    CVE-2020-11805

    Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.

  • Unscored —
    CVE-2017-17477

    Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface v…

  • Unscored —
    CVE-2019-7178

    Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.

  • Unscored —
    CVE-2019-7177

    Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.

  • Unscored —
    CVE-2018-10585

    Pexip Infinity before 18 allows remote Denial of Service (XML parsing).

  • Unscored —
    CVE-2018-10432

    Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).

  • Unscored —
    CVE-2020-25749 Public exploit

    The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) could allow …

  • Unscored —
    CVE-2020-25748 Public exploit

    A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342,…

  • Unscored —
    CVE-2020-25747 Public exploit

    The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote a…

  • Critical 9.8
    CVE-2020-25223 Exploited Public exploit Scanner template EPSS 97%

    A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511…

    KEV Mar 25, 2022