Skip to content
OpenAdvisories

Archive

1 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /1 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.8
    CVE-2020-14750 Exploited Public exploit Scanner template EPSS 99%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-28044

    An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in manag…

  • Unscored —
    CVE-2020-28045

    An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and…

  • Unscored —
    CVE-2020-28046

    An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal…

  • High 8.8
    CVE-2020-25849

    Openfind MailGates/MailAudit - Command Injection

    MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers obtain the user’s access token.

    Openfind MailAudit MailGates
  • Unscored —
    CVE-2020-28043

    MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.

  • Medium —
    CVE-2020-28042 Public exploit

    Signature validation bypass in ServiceStack

    ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.

    ServiceStack NuGet
  • Unscored —
    CVE-2020-28041

    The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate w…