Skip to content
OpenAdvisories

Archive

10 November 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2019-7357 Public exploit

    Subrion CMS CSRF Vulnerability

    Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.

  • High 7.2
    CVE-2020-16125 Public exploit

    gdm3 would start gnome-initial-setup if it cannot contact accountservice

    gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…