Skip to content
OpenAdvisories

Archive

5 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /5 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-15237

    Timing attack in Shrine

    In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated signature in constant …

    shrinerb shrine shrine RubyGems
  • Medium 5.9
    CVE-2020-15235

    Sensitive data exposure in RACTF

    In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins. All versions after commit f3dc89b9f6ab1544a289b3efc06699b13d63e0bd(3/10/20) are patched.

    ractf core
  • Medium 5.0
    CVE-2020-25635

    Ansible does not collect garbage after playbook run

    A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.

    AWS Community Community Collections ansible ansible Ubuntu PyPI
  • Medium 6.6
    CVE-2020-25636

    A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file …

    AWS Community Community Collections ansible Ubuntu
  • Medium 6.0
    CVE-2020-7709

    Prototype Pollution

    This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.

    json-pointer org.webjars.npm:json-pointer npm Maven