Skip to content
OpenAdvisories

Archive

10 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /10 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2019-7357 Public exploit

    Subrion CMS CSRF Vulnerability

    Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.

    intelliants/subrion Packagist
  • Unscored —
    CVE-2020-23968 Public exploit

    Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on Progra…

  • Unscored —
    CVE-2020-0453 Public exploit

    In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent…

    Android
  • Unscored —
    CVE-2020-0452 Public exploit

    In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…

    libexif libexif libexif Android Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-0451 Public exploit

    In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap bu…

    Android
  • Unscored —
    CVE-2020-0409 Public exploit

    In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local …

    android-platform-system-core Android Ubuntu
  • Unscored —
    CVE-2020-0418 Public exploit

    In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege w…

    Android
  • Unscored —
    CVE-2020-0443 Public exploit

    In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to lo…

    Android
  • Unscored —
    CVE-2020-0439 Public exploit

    In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permis…

    Android
  • High 7.2
    CVE-2020-16125 Public exploit

    gdm3 would start gnome-initial-setup if it cannot contact accountservice

    gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…

    GNOME GDM3 gdm3 gdm3 Debian Ubuntu
  • Critical 9.8
    CVE-2020-13927 Exploited Public exploit Scanner template EPSS 100%

    Authentication bypass in Apache Airflow

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

    apache-airflow PyPI
    KEV Jan 18, 2022