Skip to content
OpenAdvisories

Archive

16 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /16 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-4763

    IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on auth…

    IBM Sterling File Gateway
  • Medium 4.8
    CVE-2020-4705

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross…

    IBM Sterling B2B Integrator
  • Medium 5.4
    CVE-2020-4672

    IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to emb…

    IBM Business Automation Workflow
  • Medium 4.3
    CVE-2020-4692

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authent…

    IBM Sterling B2B Integrator
  • Medium 6.5
    CVE-2020-4671

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sen…

    IBM Sterling B2B Integrator
  • Medium 4.3
    CVE-2020-4665

    IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on auth…

    IBM Sterling File Gateway
  • Medium 6.3
    CVE-2020-4647

    IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote …

    IBM Sterling File Gateway
  • Medium 6.3
    CVE-2020-4655

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL i…

    IBM Sterling B2B Integrator
  • Medium 5.3
    CVE-2020-4476

    IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain s…

    IBM Sterling File Gateway
  • Medium 4.3
    CVE-2020-4475

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote a…

    IBM Sterling B2B Integrator
  • Medium 6.5
    CVE-2020-4566

    IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially hig…

    IBM Sterling B2B Integrator
  • Medium 6.5
    CVE-2020-7773

    Cross-site Scripting (XSS)

    This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require("markdown-it-highlightjs"); con…

    markdown-it-highlightjs npm
  • Medium 5.6
    CVE-2020-7765

    Prototype Pollution

    This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

    @firebase/util npm
  • Medium 4.8
    CVE-2020-8897

    Robustness weakness in AWS KMS and Encryption SDKs

    A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM (and other AEAD ciphers such as AES-GCM-SIV or (X)ChaCha20Poly1305) used by the SDKs to…

    amazon AWS SDK aws-encryption-sdk com.amazonaws:aws-encryption-sdk-java Maven PyPI
  • Medium 6.4
    CVE-2020-28650

    The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard …