Skip to content
OpenAdvisories

Archive

5 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /5 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.7
    CVE-2020-24432 EPSS 11%

    Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are affected by an improper input validation vulnerability that could result in arbitr…

    Adobe Acrobat Reader
  • Medium 4.4
    CVE-2020-24431

    Acrobat Reader DC for macOS Dynamic Library Injection Vulnerability

    Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploit…

    Adobe Acrobat Reader
  • Medium 6.6
    CVE-2020-12146 EPSS 28%

    Silver Peak Unity OrchestratorTM subject to path traversal.

    In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API.

    Silver Peak Systems Unity Orchestrator
  • Medium 6.6
    CVE-2020-12147

    Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.

    In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing.

    Silver Peak Systems Unity Orchestrator
  • Medium 6.6
    CVE-2020-12145

    Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.

    Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to Orchestrator by introducing an HTTP HOST header set to 127.0.0.1 or localhost. O…

    Silver Peak Systems Unity Orchestrator
  • Medium 6.5
    CVE-2020-7762

    Arbitrary File Read

    This affects the package jsreport-chrome-pdf before 1.10.0.

    jsreport-chrome-pdf Browsers npm
  • Medium 5.3
    CVE-2020-7761

    Regular Expression Denial of Service (ReDoS)

    This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.

    @absolunet/kafe npm
  • Medium 5.3
    CVE-2020-25662

    A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation h…

    Red Hat kernel linux-raspi2 linux-hwe Ubuntu