Skip to content
OpenAdvisories

Archive

13 October 2020

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • High 7.7

    Privilege Escalation in Channelmgnt plug-in for Sopel

    In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less …

  • High 7.8
    CVE-2020-17417 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.3…

  • High 7.8

    This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.3…

  • High 7.8
    CVE-2020-17416 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.3…

  • High 7.8

    This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

  • High 7.8
    CVE-2020-17410 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

  • High 8.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE …

  • High 7.3

    Integer overflow in ROS communications library

    Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic …

  • High 7.3

    Prototype Pollution

    The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.