Skip to content
OpenAdvisories

Archive

16 November 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.0
    CVE-2020-26217 Public exploit Scanner template EPSS 85%

    Remote Code Execution in XStream

    XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XS…

  • High 8.8
    CVE-2020-23489 Public exploit

    AVideo vulnerable to Improper Privilege Management

    The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to admin.