Skip to content
OpenAdvisories

Archive

7 October 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2020-25867 Public exploit

    SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to…

  • High 7.4
    CVE-2020-15175 Public exploit EPSS 70%

    Unauthenticated File Deletion in GLPI

    In GLPI before version 9.5.2, the `​pluginimage.send.php​` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the …

  • Critical 9.0
    CVE-2020-11800 Public exploit

    Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.