Skip to content
OpenAdvisories

Archive

5 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /5 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Unscored —
    CVE-2020-4097

    In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPac…

  • Unscored —
    CVE-2020-14240

    HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site…

  • Unscored —
    CVE-2020-25398 Public exploit

    CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

  • Unscored —
    CVE-2020-25399 Public exploit

    Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a mali…

  • Unscored —
    CVE-2020-26506

    An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower pri…

  • Unscored —
    CVE-2020-27688 Public exploit

    RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files.…

  • Unscored —
    CVE-2020-28115

    SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute ar…

  • Critical 9.8
    CVE-2020-27955 Public exploit EPSS 82%

    Git LFS can execute a Git binary from the current directory

    Git LFS 2.12.0 allows Remote Code Execution.

    github.com/git-lfs/git-lfs Go
  • Unscored —
    CVE-2020-28047

    AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuratio…

  • Unscored —
    CVE-2020-15950

    Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout.

  • Unscored —
    CVE-2020-15949

    Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.

  • Unscored —
    CVE-2020-15951

    Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject a…

  • Unscored —
    CVE-2020-15952

    Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative perm…

  • Unscored —
    CVE-2020-27402

    The HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to escalate to root using the …

  • Unscored —
    CVE-2020-24849

    A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metachar…

  • High 7.5
    CVE-2020-7763

    Arbitrary File Read

    This affects the package phantom-html-to-pdf before 0.6.1.

    phantom-html-to-pdf npm
  • Medium 6.5
    CVE-2020-7762

    Arbitrary File Read

    This affects the package jsreport-chrome-pdf before 1.10.0.

    jsreport-chrome-pdf Browsers npm
  • Medium 5.3
    CVE-2020-7761

    Regular Expression Denial of Service (ReDoS)

    This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.

    @absolunet/kafe npm
  • Unscored —
    CVE-2020-27387 Public exploit EPSS 18%

    An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with acces…

  • Medium 5.3
    CVE-2020-25662

    A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation h…

    Red Hat kernel linux-raspi2 linux-hwe Ubuntu