Skip to content
OpenAdvisories

Archive

19 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /19 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2020-12495

    ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management

    Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles h…

    Endress+Hauser RSG35 - Ecograph T ORSG35 - Ecograph T Neutral/Private Label
  • Critical 9.8
    CVE-2019-20933 Public exploit Scanner template EPSS 32%

    Improper Authentication in InfluxDB

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

    influxdb github.com/influxdata/influxdb influxdb Debian Ubuntu Go