Skip to content
OpenAdvisories

Archive

12 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /12 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.3
    CVE-2020-7033

    Avaya Equinox Conferencing XSS

    A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.…

    Avaya Avaya Equinox Conferencing
  • Medium 6.1
    CVE-2020-27193

    Improper Neutralization of Input During Web Page Generation in CKEditor4

    A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

    ckeditor4 npm
  • Medium 5.3
    CVE-2020-28247

    Argument injection in lettre

    The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.

    lettre crates.io
  • Medium 5.5
    CVE-2020-24441

    Improper Access Control in Adobe Acrobat Reader for Android

    Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information stored in databases used by the application. Exploitation requi…

    Adobe Acrobat Reader
  • Medium 6.1
    CVE-2020-24443

    Reflected Cross-Site Scripting (XSS) in Adobe Connect

    Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

    Adobe Connect
  • Medium 6.1
    CVE-2020-24442

    Reflected Cross-Site Scripting (XSS) in Adobe Connect

    Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the con…

    Adobe Connect
  • Medium 6.1
    CVE-2020-13954 EPSS 41%

    Apache CXF Reflected XSS in the services listing page via the styleSheetPath

    By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject ja…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • Medium 6.5
    CVE-2020-7770

    Prototype Pollution

    This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution.

    json8 npm
  • Medium 4.8
    CVE-2020-7333

    Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)

    Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.

    McAfee Endpoint Security for Windows Windows
  • Medium 5.3
    CVE-2020-1999

    PAN-OS: Threat signatures are evaded by specifically crafted packets

    A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packet…

    Palo Alto Networks PAN-OS Network devices
  • Medium 5.4
    CVE-2020-25706

    A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of er…

    The Cacti Group cacti cacti cacti Debian Ubuntu