Skip to content
OpenAdvisories

Archive

24 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /24 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.9
    CVE-2020-26238

    Critical vulnerability found in cron-utils

    Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressio…

    jmrozanec cron-utils com.cronutils:cron-utils Maven
  • High 7.5
    CVE-2019-20925

    Denial of service via malformed network packet

    An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 7.5
    CVE-2020-26890

    Denial of service attack due to invalid JSON

    Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such…

    matrix-synapse matrix-synapse synapse Ubuntu Alpine PyPI