Archive
7 October 2020
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Unscored —CVE-2020-25867 Public exploit
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to…
-
High 7.4
Unauthenticated File Deletion in GLPI
In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the …
-
Critical 9.0CVE-2020-11800 Public exploit
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.