Skip to content
OpenAdvisories

Archive

10 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /10 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2020-26948 Public exploit Scanner template EPSS 87%

    Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

  • Unscored —
    CVE-2020-26947

    monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead …

  • High 8.1
    CVE-2020-26945

    "Deserialization errors in MyBatis"

    MyBatis before 3.5.6 mishandles deserialization of object streams.

    org.mybatis:mybatis Maven
  • Medium 6.1
    CVE-2020-26934

    phpMyAdmin Cross-site Scripting (XSS)

    phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2020-26935 Scanner template EPSS 64%

    phpMyAdmin SQL injection vulnerability

    An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Unscored —
    CVE-2020-26932

    debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, wh…

    sympa sympa Debian Ubuntu