Skip to content
OpenAdvisories

Archive

22 October 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-11853 Public exploit Scanner template EPSS 77%

    Arbitrary code execution vulnerability on multiple Micro Focus products

    Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management af…

  • High 7.8

    fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution

    A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data …

  • High 7.5

    Improper Authorization in Strapi

    In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.