Skip to content
OpenAdvisories

Archive

15 September 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2020-25453 Public exploit

    An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remot…

  • Unscored —
    CVE-2020-10759 Public exploit

    A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmwar…

  • High 8.9
    CVE-2020-15148 Public exploit Scanner template EPSS 78%

    Unsafe deserialization in Yii 2

    Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls `unserialize()` on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory.

  • Medium 5.3
    CVE-2020-8927 Public exploit

    Buffer overflow in Brotli library

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…