Skip to content
OpenAdvisories

Archive

19 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /19 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.0
    CVE-2020-15261 Public exploit EPSS 11%

    Unquoted service path vulnerability on Veyon

    On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students a…

    veyon veyon
  • High 7.7
    CVE-2020-15256

    Prototype pollution in object-path

    A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode (if version >= 0.11.0 is used), which has to be explicitly enabled by creating a new i…

    mariocasciaro object-path node-object-path object-path Debian Ubuntu npm
  • High 7.5
    CVE-2020-6085

    An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-B…

  • High 7.5
    CVE-2020-6084

    An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-B…

  • High 8.0
    CVE-2020-15263

    XSS in platform

    In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4.

    orchidsoftware platform orchid/platform Packagist
  • High 7.1
    CVE-2020-7745

    Malicious Package

    This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.