Skip to content
OpenAdvisories

Archive

6 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /6 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-13333

    A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a li…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2020-13345

    An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.6
    CVE-2020-15215 Public exploit

    Context isolation bypass in Electron

    Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affe…

    electron electron electron npm
  • Medium 5.9
    CVE-2020-4528

    IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under sp…

    IBM DataPower Gateway
  • Medium 6.1
    CVE-2019-4725

    IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to emb…

    IBM Security Access Manager Appliance
  • Medium 4.2
    CVE-2020-25803

    Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions…

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven
  • Medium 4.2
    CVE-2020-25802

    Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3…

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven