Skip to content
OpenAdvisories

Archive

23 November 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2020-4006 Exploited EPSS 17%

    VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command …

    KEV Nov 3, 2021
  • Critical 9.8

    Server-Side Request Forgery in private-ip

    Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of cri…

  • Critical 9.8

    IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic ke…