General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-14012 | scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacke… | Medium (5.4) | 2020-06-10 | General Purpose |
| CVE-2020-14010 | The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) param… | Medium (6.1) | 2020-06-10 | General Purpose |
| CVE-2020-10755 | An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-c… | Medium (6.5) | 2020-06-10 | General Purpose |
| CVE-2020-7675 | cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument exec… | Critical (9.8) | 2020-06-10 | General Purpose |
| CVE-2020-7674 | access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function i… | Critical (9.8) | 2020-06-10 | General Purpose |