Skip to content
OpenAdvisories

Archive

21 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /21 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Unscored —
    CVE-2020-27615 Public exploit Scanner template EPSS 53%

    The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_f…

  • Medium 6.1
    CVE-2020-3580 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2020-7750 Public exploit

    Cross-site Scripting (XSS)

    This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.

    scratch-svg-renderer npm
  • Unscored —
    CVE-2020-27603 Public exploit

    BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access ext…

  • High 7.2
    CVE-2020-14883 Exploited Public exploit Scanner template EPSS 98%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-14864 Exploited Public exploit Scanner template EPSS 97%

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: In…

    Oracle Business Intelligence Enterprise Edition
    KEV Jan 18, 2022
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    Oracle Solaris Operating System
    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-25820 Public exploit EPSS 10%

    BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an upload…