CVEs published June 19, 2020
193 CVEs were published on June 19, 2020: 0 critical, 8 high.
- Published
- 193
- Critical
- 0
- High
- 8
- Medium
- 8
- Low
- 0
- Unrated
- 177
- Now in CISA KEV
- 0
- Fix available
- 86
Most affected products
- github.com/mattermost/mattermost-server
- 62
- GitLab
- 11
- IBM Rational DOORS Next Generation
- 3
- Apache Archiva · org.apache.archiva:archiva
- 1
- casperjs
- 1
- dolibarr/dolibarr
- 1
- EC-CUBE CO. EC-CUBE · ec-cube/ec-cube
- 1
- github.com/mattermost/mattermost · github.com/mattermost… +1
- 1
- github.com/mattermost/mattermost-server · github.com/matter…
- 1
- http://github.com/rails/rails · actionview
- 1
High 8
- CVE-2020-13263An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could alloGitLab
- CVE-2020-13275A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1GitLab
- CVE-2020-13274A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLGitLab
- CVE-2020-13273A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1GitLab
- CVE-2020-13272OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flowGitLab
- CVE-2020-13276User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 1GitLab
- CVE-2020-10750Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store the Jager project jaegertracing/jaeger · github.com/jaegert…
- CVE-2020-7679Prototype Pollutioncasperjs
Medium, low and unrated 185
- CVE-2020-13264Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster GitLab
- CVE-2020-13261Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials vGitLab
- CVE-2020-13262Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload tGitLab
- CVE-2020-13265User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verificationGitLab
- CVE-2020-14931A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary co
- CVE-2020-14930An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464.
- CVE-2019-20891WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored crosswoocommerce/woocommerce
- CVE-2015-9548An issue was discovered in Mattermost Server before 1.2.0.
- CVE-2016-11084An issue was discovered in Mattermost Server before 2.1.0.github.com/mattermost/mattermost-server
- CVE-2016-11083An issue was discovered in Mattermost Server before 2.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11082An issue was discovered in Mattermost Server before 2.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11081An issue was discovered in Mattermost Server before 2.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11080An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11079An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11078An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11077An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11076An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11075An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11074An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11073An issue was discovered in Mattermost Server before 3.0.0.github.com/mattermost/mattermost-server
- CVE-2016-11072An issue was discovered in Mattermost Server before 3.0.2.github.com/mattermost/mattermost-server
- CVE-2016-11071An issue was discovered in Mattermost Server before 3.1.0.github.com/mattermost/mattermost-server
- CVE-2016-11070An issue was discovered in Mattermost Server before 3.1.0.github.com/mattermost/mattermost-server
- CVE-2016-11069An issue was discovered in Mattermost Server before 3.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11068An issue was discovered in Mattermost Server before 3.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11067An issue was discovered in Mattermost Server before 3.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11066An issue was discovered in Mattermost Server before 3.2.0.github.com/mattermost/mattermost-server
- CVE-2016-11065An issue was discovered in Mattermost Server before 3.3.0.
- CVE-2016-11064An issue was discovered in Mattermost Desktop App before 3.4.0.
- CVE-2016-11063An issue was discovered in Mattermost Server before 3.5.1.github.com/mattermost/mattermost-server
- CVE-2016-11062An issue was discovered in Mattermost Server before 3.5.1.
- CVE-2017-18921An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2.
- CVE-2017-18920An issue was discovered in Mattermost Server before 3.6.2.
- CVE-2017-18919An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3.
- CVE-2017-18918An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5.github.com/mattermost/mattermost-server
- CVE-2017-18907An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.github.com/mattermost/mattermost-server
- CVE-2017-18916An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.github.com/mattermost/mattermost-server
- CVE-2017-18917An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.github.com/mattermost/mattermost-server
- CVE-2017-18906An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used.github.com/mattermost/mattermost-server
- CVE-2017-18905An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidatigithub.com/mattermost/mattermost-server
- CVE-2017-18913An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.
- CVE-2017-18908An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.github.com/mattermost/mattermost-server
- CVE-2017-18914An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.
- CVE-2017-18915An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.github.com/mattermost/mattermost-server
- CVE-2020-9495Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection.Apache Archiva · org.apache.archiva:archiva
- CVE-2020-14929Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is
- CVE-2017-18909An issue was discovered in Mattermost Server before 3.9.0 when SAML is used.github.com/mattermost/mattermost-server
- CVE-2017-18910An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.
- CVE-2017-18911An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.github.com/mattermost/mattermost-server
- CVE-2017-18912An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.github.com/mattermost/mattermost-server
- CVE-2017-18904An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.github.com/mattermost/mattermost-server
- CVE-2017-18903An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.github.com/mattermost/mattermost-server
- CVE-2017-18902An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.github.com/mattermost/mattermost-server
- CVE-2017-18898An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18900An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.github.com/mattermost/mattermost-server
- CVE-2017-18886An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18895An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18880An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.
- CVE-2017-18899An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.
- CVE-2017-18887An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18888An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18893An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18894An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider.github.com/mattermost/mattermost-server
- CVE-2017-18896An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18897An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider.github.com/mattermost/mattermost-server
- CVE-2017-18885An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18901An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.github.com/mattermost/mattermost-server
- CVE-2017-18889An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18890An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18892An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18891An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.github.com/mattermost/mattermost-server
- CVE-2017-18884An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18883An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider.github.com/mattermost/mattermost-server
- CVE-2017-18882An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.
- CVE-2017-18881An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.
- CVE-2017-18879An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18878An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18874An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used.github.com/mattermost/mattermost-server
- CVE-2017-18873An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18872An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3.github.com/mattermost/mattermost-server
- CVE-2018-21252An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3.
- CVE-2018-21256An issue was discovered in Mattermost Server before 5.1.
- CVE-2018-21264An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2.
- CVE-2020-3972VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implVMware Tools for macOS
- CVE-2020-13277An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5GitLab
- CVE-2020-8167A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.http://github.com/rails/rails · actionview
- CVE-2020-8165A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal userhttps://github.com/rails/rails · activesupport
- CVE-2020-8164A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply informatihttps://github.com/rails/rails · actionpack
- CVE-2020-14926CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page.
- CVE-2020-14927Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.
- CVE-2020-8162A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter thahttps://github.com/rails/rails · activestorage
- CVE-2018-21257An issue was discovered in Mattermost Server before 5.1.
- CVE-2018-21261An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3.
- CVE-2018-21262An issue was discovered in Mattermost Server before 4.7.3.
- CVE-2018-21265An issue was discovered in Mattermost Desktop App before 4.0.0.
- CVE-2017-18871An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2.github.com/mattermost/mattermost-server
- CVE-2018-21250An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4.
- CVE-2017-18877An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.github.com/mattermost/mattermost-server
- CVE-2017-18876An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used.github.com/mattermost/mattermost-server
- CVE-2018-21255An issue was discovered in Mattermost Server before 5.1.
- CVE-2018-21254An issue was discovered in Mattermost Server before 5.1.
- CVE-2018-21260An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3.
- CVE-2018-21251An issue was discovered in Mattermost Server before 5.2 and 5.1.1.
- CVE-2018-21249An issue was discovered in Mattermost Server before 5.3.0.
- CVE-2017-18875An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used.github.com/mattermost/mattermost-server
- CVE-2017-18870An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4.github.com/mattermost/mattermost-server
- CVE-2018-21259An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2.
- CVE-2019-20889An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5.
- CVE-2018-21248An issue was discovered in Mattermost Server before 5.4.0.
- CVE-2019-20888An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5.
- CVE-2019-20886An issue was discovered in Mattermost Server before 5.8.0.
- CVE-2018-21263An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2.
- CVE-2018-21258An issue was discovered in Mattermost Server before 5.1.github.com/mattermost/mattermost-server · github.com/matter…
- CVE-2018-21253An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2.
- CVE-2019-20890An issue was discovered in Mattermost Server before 5.7.
- CVE-2019-20884An issue was discovered in Mattermost Server before 5.8.0.
- CVE-2019-20887An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6.
- CVE-2019-20885An issue was discovered in Mattermost Server before 5.8.0.
- CVE-2019-20883An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only.
- CVE-2019-20882An issue was discovered in Mattermost Server before 5.8.0.
- CVE-2020-13961Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global varstrapi
- CVE-2019-20881An issue was discovered in Mattermost Server before 5.8.0.
- CVE-2019-20878An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20879An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7.
- CVE-2019-20880An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7.
- CVE-2019-20877An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20876An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20875An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2020-14475A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into dolibarr/dolibarr
- CVE-2020-4297IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2020-4295IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2020-4281IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2019-20874An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20873An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20872An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20871An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.
- CVE-2019-20870An issue was discovered in Mattermost Server before 5.10.0.
- CVE-2019-20869An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9.
- CVE-2019-20868An issue was discovered in Mattermost Server before 5.11.0.
- CVE-2019-20867An issue was discovered in Mattermost Server before 5.11.0.
- CVE-2019-20866An issue was discovered in Mattermost Server before 5.12.0.
- CVE-2019-20865An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10.
- CVE-2020-14470In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart
- CVE-2019-20864An issue was discovered in Mattermost Plugins before 5.13.0.
- CVE-2019-20863An issue was discovered in Mattermost Server before 5.13.0.
- CVE-2019-20862An issue was discovered in Mattermost Server before 5.13.0.
- CVE-2019-20861An issue was discovered in Mattermost Desktop App before 4.2.2.
- CVE-2019-20860An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4.
- CVE-2019-20859An issue was discovered in Mattermost Server before 5.15.0.
- CVE-2019-20858An issue was discovered in Mattermost Server before 5.15.0.
- CVE-2019-20857An issue was discovered in Mattermost Server before 5.16.0.
- CVE-2019-20856An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS.
- CVE-2019-20855An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6.
- CVE-2019-20854An issue was discovered in Mattermost Server before 5.17.0.
- CVE-2019-20853An issue was discovered in Mattermost Packages before 5.16.3.
- CVE-2019-20852An issue was discovered in Mattermost Mobile Apps before 1.26.0.
- CVE-2019-20851An issue was discovered in Mattermost Mobile Apps before 1.26.0.
- CVE-2019-20850An issue was discovered in Mattermost Mobile Apps before 1.26.0.
- CVE-2019-20849An issue was discovered in Mattermost Mobile Apps before 1.26.0.
- CVE-2019-20848An issue was discovered in Mattermost Mobile Apps before 1.26.0.
- CVE-2019-20847An issue was discovered in Mattermost Server before 5.18.0.
- CVE-2019-20846An issue was discovered in Mattermost Server before 5.18.0.
- CVE-2019-20845An issue was discovered in Mattermost Server before 5.18.0.
- CVE-2019-20844An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7.
- CVE-2019-20843An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7.
- CVE-2019-20842An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7.
- CVE-2019-20841An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7.
- CVE-2020-14460An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8.
- CVE-2020-14459An issue was discovered in Mattermost Server before 5.19.0.
- CVE-2020-14458An issue was discovered in Mattermost Server before 5.19.0.
- CVE-2020-14457An issue was discovered in Mattermost Server before 5.20.0.github.com/mattermost/mattermost · github.com/mattermost… +1
- CVE-2020-14456An issue was discovered in Mattermost Desktop App before 4.4.0.
- CVE-2020-14455An issue was discovered in Mattermost Desktop App before 4.4.0.
- CVE-2020-14454An issue was discovered in Mattermost Desktop App before 4.4.0.
- CVE-2020-14453An issue was discovered in Mattermost Server before 5.21.0.
- CVE-2020-14452An issue was discovered in Mattermost Server before 5.21.0.
- CVE-2020-14451An issue was discovered in Mattermost Mobile Apps before 1.29.0.
- CVE-2020-14450An issue was discovered in Mattermost Server before 5.22.0.
- CVE-2020-14449An issue was discovered in Mattermost Mobile Apps before 1.30.0.
- CVE-2020-14448An issue was discovered in Mattermost Server before 5.23.0.
- CVE-2020-14447An issue was discovered in Mattermost Server before 5.23.0.
- CVE-2020-14462CALDERA 2.7.0 allows XSS via the Operation Name box.
- CVE-2020-14019Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) isrtslib-fb
- CVE-2020-5590Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary fiEC-CUBE CO. EC-CUBE · ec-cube/ec-cube
- CVE-2020-8184A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possibhttps://github.com/rack/rack · rack