Skip to content
OpenAdvisories

Archive

27 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /27 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

173 results · Feed

  • Unscored —
    CVE-2020-6022

    Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring file…

  • Unscored —
    CVE-2020-8579

    Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access…

  • Unscored —
    CVE-2020-10256

    An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the …

  • Unscored —
    CVE-2020-23864

    An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a mal…

  • High 7.5
    CVE-2020-7753

    Regular Expression Denial of Service (ReDoS)

    All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().

    trim npm
  • Unscored —
    CVE-2020-27179

    konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset t…

  • Unscored —
    CVE-2020-27183

    A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disc…

  • Unscored —
    CVE-2020-27182

    Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to i…

  • Unscored —
    CVE-2020-27181

    A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to …

  • Unscored —
    CVE-2020-27180

    konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter.

  • Low 3.8
    CVE-2020-8956

    Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Setti…

  • Unscored —
    CVE-2020-15352

    An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) bef…

  • Unscored —
    CVE-2018-21269

    checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal …

    openrc openrc Debian Alpine