Archive

28 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /28 November 2020 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.3

CVE-2020-24710

Gophish vulnerable to Server-Side Request Forgery

Gophish before 0.11.0 allows SSRF attacks.

github.com/gophish/gophish Go

Oct 28, 2020
Medium 6.1

CVE-2018-19953 Exploited · Ransomware EPSS 31%

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

QNAP Systems QTS

Oct 28, 2020
KEV May 24, 2022
Medium 6.5

CVE-2020-4782

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…

IBM WebSphere Application Server

Oct 28, 2020
Medium 6.1

CVE-2020-24303

Grafana XSS via a query alias for the ElasticSearch datasource

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

grafana github.com/grafana/grafana Ubuntu Go

Oct 28, 2020