Skip to content
OpenAdvisories

Archive

6 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /6 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.6
    CVE-2020-15215 Public exploit

    Context isolation bypass in Electron

    Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affe…

    electron electron electron npm
  • High 8.2
    CVE-2020-7740 Public exploit

    Server-side Request Forgery (SSRF)

    This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an…

    node-pdf-generator npm
  • Unscored —
    CVE-2020-24219 Public exploit EPSS 24%

    An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenti…

  • Unscored —
    CVE-2020-24217 Public exploit EPSS 40%

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endp…

  • Unscored —
    CVE-2020-24215 Public exploit EPSS 20%

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use ha…

  • Unscored —
    CVE-2020-24214 Public exploit EPSS 35%

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a…

  • Unscored —
    CVE-2020-25637 Public exploit

    A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting …

    libvirt libvirt libvirt libvirt Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2020-25613 Public exploit

    WEBRick vulnerable to HTTP Request/Response Smuggling

    An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypa…

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine RubyGems