Skip to content
OpenAdvisories

Archive

6 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /6 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-28328 Public exploit EPSS 63%

    SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certai…

  • Critical 9.8
    CVE-2020-25592 Public exploit EPSS 58%

    SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

    salt salt salt Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2020-16846 Exploited Public exploit Scanner template EPSS 100%

    SaltStack Salt Command Injection in netapi ssh client

    An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

    salt salt salt Ubuntu Alpine PyPI
    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-28249 Public exploit

    Cross-site scripting in Joplin

    Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

    joplin npm
  • High 8.8
    CVE-2020-27347 Public exploit

    tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

    In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

    Ubuntu tmux tmux tmux Debian Ubuntu Alpine