Skip to content
OpenAdvisories

Archive

23 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /23 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2019-14559

    Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service v…

    edk2 edk2 Debian Ubuntu
  • Unscored —
    CVE-2019-14553

    Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network …

    edk2 edk2 Debian Ubuntu
  • Unscored —
    CVE-2020-28421

    CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that…

  • High 7.2
    CVE-2020-7777

    Arbitrary Code Execution

    This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I …

    jsen npm
  • Medium 4.1
    CVE-2020-1778

    Bypassing user account validation

    When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

    OTRS OTRS otrs2 Ubuntu
  • Medium 6.5
    CVE-2019-2393

    Crash while joining collections with $lookup

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 an…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2019-20923

    Crash while handling internal Javascript exception types

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affects Mongo…

    MongoDB MongoDB Server
  • Medium 6.5
    CVE-2019-20924

    Invariant in IndexBoundsBuilder

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.

    MongoDB MongoDB Server
  • Medium 6.5
    CVE-2019-2392

    $mod can result in undefined behavior

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versi…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2018-20805

    Invariant with $elemMatch

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10.

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2018-20802

    Post-auth queries on compound index may crash mongod

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prio…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2018-20804

    Invariant failure in applyOps

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2020-7926

    Specific query can cause a DoS against MongoDB Server

    A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 a…

    MongoDB MongoDB Server
  • High 7.5
    CVE-2020-7925

    Denial of Service when processing malformed Role names

    Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4…

    MongoDB MongoDB Server
  • Unscored —
    CVE-2020-27985

    Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain r…

  • Medium 6.5
    CVE-2020-28053

    Privilege Escalation in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • Unscored —
    CVE-2020-0569

    Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentia…

    qtbase-opensource-src qtbase-opensource-src Windows Debian Ubuntu