Skip to content
OpenAdvisories

Archive

30 November 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2020-29395 Public exploit Scanner template EPSS 13%

    The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

  • Unscored —
    CVE-2020-29364 Public exploit

    In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news ti…

  • Unscored —
    CVE-2020-28926 Public exploit EPSS 13%

    ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to …

  • Unscored —
    CVE-2020-28978 Public exploit EPSS 15%

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make …

  • Unscored —
    CVE-2020-28977 Public exploit EPSS 15%

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make …

  • Unscored —
    CVE-2020-28976 Public exploit Scanner template EPSS 28%

    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can mak…