Skip to content
OpenAdvisories

Archive

20 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /20 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2020-4004

    VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstat…

    Virtualization
  • Unscored —
    CVE-2020-4005

    VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains …

    Virtualization
  • Unscored —
    CVE-2020-28845

    A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious …

  • Unscored —
    CVE-2020-20740

    PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().

    pdfresurrect pdfresurrect Debian Ubuntu
  • Unscored —
    CVE-2020-20739

    im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may …

    vips vips vips Debian Ubuntu Alpine
  • High 7.5
    CVE-2020-26236

    Verification Code Hijacking in ScratchVerifier

    In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. A…

    ScratchVerifier ScratchVerifier
  • Unscored —
    CVE-2020-28974

    A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-28877

    Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, …

  • High 8.8
    CVE-2020-13671 Exploited Public exploit EPSS 31%

    Drupal core Unrestricted Upload of File with Dangerous Type

    Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
    KEV Jan 18, 2022
  • Unscored —
    CVE-2020-19668

    Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.…

    libsixel libsixel Debian Ubuntu
  • Medium 6.4
    CVE-2020-7842 Public exploit

    D'live AP command injection vulnerability

    Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.

    Netis Korea D'live set-top box AP(WF2429TB)
  • Unscored —
    CVE-2020-25839

    NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability …

  • Medium 5.9
    CVE-2020-4937

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms…

    IBM Sterling B2B Integrator
  • High 7.8
    CVE-2020-4739

    IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.1
    CVE-2020-4788

    IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the da…

    IBM AIX VIOS linux-raspi2 Debian Ubuntu
  • Unscored —
    CVE-2020-5668

    Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and e…

    Mitsubishi Electric MELSEC iQ-R ICS / OT
  • Unscored —
    CVE-2020-19667

    Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.

    imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine