19 November 2020

5 results · Clear filters · Feed

• High 7.8
  CVE-2020-28948 Public exploit EPSS 47%

  Multiple vulnerabilities through filename manipulation in Archive_Tar

  Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

  drupal/core drupal7 drupal7 php-pear Debian Ubuntu Alpine Packagist
  Nov 19, 2020
• High 7.8
  CVE-2020-28949 Exploited Public exploit EPSS 85%

  Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

  drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine
  Nov 19, 2020

  KEV Aug 25, 2022
• Unscored —
  CVE-2020-28054 Public exploit

  JamoDat TSMManager Collector version up to 6.5.0.21 is vulnerable to an Authorization Bypass because the Collector comp…

  Nov 19, 2020
• Critical 9.8
  CVE-2019-20933 Public exploit Scanner template EPSS 32%

  Improper Authentication in InfluxDB

  InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

  influxdb github.com/influxdata/influxdb influxdb Debian Ubuntu Go
  Nov 19, 2020
• Unscored —
  CVE-2020-8277 Public exploit EPSS 54%

  A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denia…

  Node.js node nodejs nodejs-current Debian Azure Linux Alpine
  Nov 19, 2020