Archive
November 2020
Vulnerabilities first published in this month (UTC), newest first.
82 results · Clear filters · Feed
-
Unscored —CVE-2020-25538 Public exploit
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and …
-
Unscored —
Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done b…
-
Unscored —CVE-2020-28414 Public exploit
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unaut…
-
Unscored —CVE-2020-28415 Public exploit
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unaut…
-
Unscored —
An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and …
-
Unscored —CVE-2020-8694 Public exploit
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to …
-
High 8.0CVE-2020-26218 Public exploit
HTML Injection in touchbase.ai
touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.
-
High 7.8
Windows Kernel Local Elevation of Privilege Vulnerability
Windows Kernel Local Elevation of Privilege Vulnerability
KEV Nov 3, 2021 -
High 7.8CVE-2020-17086 Public exploit
Raw Image Extension Remote Code Execution Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
-
High 7.0CVE-2020-17057 Public exploit
Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
-
High 7.8CVE-2020-17035 Public exploit
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
-
Low 3.3CVE-2020-16126 Public exploit
accountsservice drops ruid, allows unprivileged users to send it signals
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a…
-
High 8.8CVE-2019-7357 Public exploit
Subrion CMS CSRF Vulnerability
Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.
-
Unscored —CVE-2020-23968 Public exploit
Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on Progra…
-
Unscored —CVE-2020-0453 Public exploit
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent…
-
Unscored —CVE-2020-0452 Public exploit
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…
-
Unscored —CVE-2020-0451 Public exploit
In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap bu…
-
Unscored —CVE-2020-0409 Public exploit
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local …
-
Unscored —CVE-2020-0418 Public exploit
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege w…
-
Unscored —CVE-2020-0443 Public exploit
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to lo…
-
Unscored —CVE-2020-0439 Public exploit
In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permis…
-
High 7.2CVE-2020-16125 Public exploit
gdm3 would start gnome-initial-setup if it cannot contact accountservice
gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…
-
Critical 9.8
Authentication bypass in Apache Airflow
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …
KEV Jan 18, 2022 -
Unscored —
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a …
-
Unscored —
tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the s…
-
Unscored —
SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certai…
-
Critical 9.8
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
-
Critical 9.8
SaltStack Salt Command Injection in netapi ssh client
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
KEV Nov 3, 2021 -
Medium 6.1CVE-2020-28249 Public exploit
Cross-site scripting in Joplin
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.
-
High 8.8CVE-2020-27347 Public exploit
tmux stack buffer overflow in function input_csi_dispatch_sgr_colon
In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.
-
Unscored —CVE-2020-25398 Public exploit
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
-
Unscored —CVE-2020-25399 Public exploit
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a mali…
-
Unscored —CVE-2020-27688 Public exploit
RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files.…
-
Critical 9.8
Git LFS can execute a Git binary from the current directory
Git LFS 2.12.0 allows Remote Code Execution.
-
Unscored —
An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with acces…
-
Unscored —CVE-2019-7356 Public exploit
Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.
-
Unscored —CVE-2020-8036 Public exploit
str2tokbuf used incorrectly by print-someip.c
The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
-
Critical 9.6
Heap buffer overflow in CefSharp
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
KEV Nov 3, 2021 -
Unscored —
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can ex…
-
Unscored —
SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.