Skip to content
OpenAdvisories

Archive

2 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /2 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2020-26527 Public exploit

    An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random o…

  • Unscored —
    CVE-2020-26526 Public exploit

    An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. T…

  • Unscored —
    CVE-2020-26525 Public exploit EPSS 25%

    Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the databa…

  • Unscored —
    CVE-2020-26124 Public exploit EPSS 65%

    openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield P…

  • Unscored —
    CVE-2020-17382 Public exploit

    The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).

  • Unscored —
    CVE-2020-14294 Public exploit

    An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when r…

  • Unscored —
    CVE-2020-14293 Public exploit

    conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacte…

  • Unscored —
    CVE-2020-12124 Public exploit Scanner template EPSS 75%

    A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.…