Skip to content
OpenAdvisories

Archive

November 2020

Vulnerabilities first published in this month (UTC), newest first.

← October 2020 2020 / November December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-26235 Public exploit

    Segmentation fault in Rust time crate

    In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the …

    time-rs time rust-time time Ubuntu Alpine crates.io
  • Medium 6.4
    CVE-2020-7842 Public exploit

    D'live AP command injection vulnerability

    Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.

    Netis Korea D'live set-top box AP(WF2429TB)
  • Medium 6.1
    CVE-2020-28249 Public exploit

    Cross-site scripting in Joplin

    Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

    joplin npm
  • Medium —
    CVE-2020-28042 Public exploit

    Signature validation bypass in ServiceStack

    ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.

    ServiceStack NuGet