Skip to content
OpenAdvisories

Archive

15 November 2020

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to…

  • Unscored —

    A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to d…

  • Unscored —

    A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to…

  • Unscored —

    An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to …

  • Unscored —

    An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to de…

  • Unscored —

    An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to …

  • High 7.5

    Prototype pollution in controlled-merge

    Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution.

  • High 7.5

    Prototype Pollution

    This affects the package doc-path before 2.1.2.