Skip to content
OpenAdvisories

Archive

18 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /18 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.6
    CVE-2020-13359

    The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malic…

    GitLab GitLab CE/EE Web / CMS
  • High 8.2
    CVE-2020-13356

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request co…

    GitLab GitLab CE/EE Web / CMS
  • High 7.5
    CVE-2020-13355

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LF…

    GitLab GitLab CE/EE Web / CMS
  • High 8.1
    CVE-2020-26226

    Secret disclosure in semantic-release

    In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters …

    semantic-release semantic-release semantic-release npm
  • High 7.5
    CVE-2020-3392

    Cisco IoT Field Network Director Missing API Authentication Vulnerability

    A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not properly authenticate API…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • High 8.7
    CVE-2020-26072

    Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability

    A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain. The vulnerability is due to insufficient authorization in th…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • High 7.2
    CVE-2020-26933

    Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1…