Skip to content
OpenAdvisories

Archive

13 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /13 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2020-27217

    Improper Validation of Specified Quantity in Input in Eclipse Hono

    In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated duri…

    The Eclipse Foundation Eclipse Hono org.eclipse.hono:hono-core Maven
  • High 7.4
    CVE-2020-26230

    Deanonymization of COVID-19 positive users of Radar COVID

    Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerabilit…

    RadarCOVID radar-covid-backend-dp3t-server
  • High 7.7
    CVE-2020-26223

    Authorization bypass in Spree

    Spree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. The perpetrator could query the API v2 Order Status endpoint…

    spree spree spree_api RubyGems
  • High 8.7
    CVE-2020-26222

    Remote code execution in dependabot-core

    Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before version 0.125.1, there is a remote code execution vulnerability i…

    dependabot dependabot-core dependabot-common dependabot-omnibus RubyGems
  • High 8.8
    CVE-2020-6149

    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD …

  • High 8.8
    CVE-2020-6148

    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD …

  • High 8.8
    CVE-2020-6147

    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD …

  • High 8.8
    CVE-2020-6156

    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD …

  • High 8.8
    CVE-2020-6155

    A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD…

  • High 8.8
    CVE-2020-6150

    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompress…