Archive

9 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /9 December 2020 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2020-14188

gajira-create GitHub action vulnerable to arbitrary code execution

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

Atlassian gajira-create atlassian/gajira-create GitHub Actions

Nov 9, 2020
Critical 9.1

CVE-2020-24407

Arbitrary code execution via file import functionality

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data an…

Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist

Nov 9, 2020