Archive

November 2020

Vulnerabilities first published in this month (UTC), newest first.

← October 2020 2020 / November December 2020 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.8

CVE-2020-13671 Exploited Public exploit EPSS 31%

Drupal core Unrestricted Upload of File with Dangerous Type

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist

Nov 20, 2020
KEV Jan 18, 2022
High 7.8

CVE-2020-28949 Exploited Public exploit EPSS 85%

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine

Nov 19, 2020
KEV Aug 25, 2022
High 7.8

CVE-2020-17087 Exploited Public exploit

Windows Kernel Local Elevation of Privilege Vulnerability

Windows Kernel Local Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
KEV Nov 3, 2021