Skip to content
OpenAdvisories

Archive

10 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /10 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2019-7357 Public exploit

    Subrion CMS CSRF Vulnerability

    Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.

    intelliants/subrion Packagist
  • High 8.8
    CVE-2020-25074

    MoinMoin vulnerable to remote code execution via cache action

    The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.

    moin moin Ubuntu PyPI
  • High 7.5
    CVE-2020-26810

    SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to…

    SAP SAP Commerce Cloud (Accelerator Payment Mock)
  • High 8.6
    CVE-2020-26815

    SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to sen…

    SAP SAP Fiori Launchpad (News Tile Application)
  • High 7.5
    CVE-2020-28267

    Prototype pollution in @strikeentco/set

    Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

    @strikeentco/set npm
  • High 7.3
    CVE-2020-7766

    Prototype Pollution

    This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr/classes/_src_pointer_.jsonpointer.htmlset) when the force flag is set to true. The function recursively set the property in the target obj…

    json-ptr npm
  • High 7.2
    CVE-2020-16125 Public exploit

    gdm3 would start gnome-initial-setup if it cannot contact accountservice

    gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…

    GNOME GDM3 gdm3 gdm3 Debian Ubuntu