Skip to content
OpenAdvisories

Archive

2 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /2 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.2
    CVE-2020-13337

    An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 8.5
    CVE-2020-15230

    Arbitrary file read un Vapor

    Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.

    vapor vapor github.com/vapor/vapor SwiftURL
  • High 8.3
    CVE-2020-7738

    Arbitrary Code Execution

    All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().

    shiba npm
  • High 7.3
    CVE-2020-7737

    Prototype Pollution

    All versions of package safetydance are vulnerable to Prototype Pollution via the set function.

    safetydance npm
  • High 7.3
    CVE-2020-7736

    Prototype Pollution

    The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

    bmoor npm