Skip to content
OpenAdvisories

Archive

17 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /17 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.0
    CVE-2020-26216

    Cross-Site Scripting in TYPO3 Fluid

    TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes a…

    TYPO3 Fluid typo3fluid/fluid Packagist
  • High 7.1
    CVE-2020-26405

    Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to s…

    GitLab GitLab CE/EE Web / CMS
  • High 8.8
    CVE-2020-7841

    TOBESOFT XPLATFORM arbitrary hta file execution vulnerability

    Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

    Tobesoft XPLATFORM XPlatformLib922.dll
  • High 7.3
    CVE-2020-7774 EPSS 70%

    Prototype Pollution

    The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

    nodejs y18n node-y18n node-y18n Debian Ubuntu Alpine npm
  • High 8.1
    CVE-2020-27131 EPSS 92%

    Cisco Security Manager Java Deserialization Vulnerabilities

    Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization…

    Cisco Cisco Security Manager Network devices
  • High 7.4
    CVE-2020-27125

    Cisco Security Manager Static Credential Vulnerability

    A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker co…

    Cisco Cisco Security Manager Network devices
  • High 8.1
    CVE-2020-14389

    Improper privilege management in Keycloak

    It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.

    org.keycloak:keycloak-core Maven