Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2020

70 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-3657
    48Plan

    u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client th

    CriticalCVSS 9.8No exploitEPSS 28%

    qualcomm · apq8009 firmwareNov 2, 2020

  • CVE-2020-14425
    40Plan

    Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.

    HighCVSS 7.8Proof of conceptEPSS 31%

    foxitsoftware · foxit readerNov 2, 2020

  • CVE-2020-14750
    99Now

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    oracle · weblogic serverNov 2, 2020

  • CVE-2020-24881
    61This week

    SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

    CriticalCVSS 9.8Proof of conceptEPSS 73%

    enhancesoft · osticketNov 2, 2020

  • CVE-2020-28032
    44Plan

    WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    wordpress · wordpressNov 2, 2020

  • CVE-2020-15994
    39Monitor

    Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted H

    HighCVSS 8.8No exploitEPSS 13%

    google · chromeNov 2, 2020

  • CVE-2020-15999
    87Now

    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption vi

    CriticalCVSS 9.6KEVWeaponizedEPSS 63%

    google · chromeNov 2, 2020

  • CVE-2020-16009
    79This week

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption

    HighCVSS 8.8KEVWeaponizedEPSS 48%

    google · chromeNov 2, 2020

  • CVE-2020-16010
    70This week

    Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer pro

    CriticalCVSS 9.6KEVWeaponizedEPSS 6%

    google · chromeNov 2, 2020

  • CVE-2020-27387
    41Plan

    An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager)

    HighCVSS 8.8WeaponizedEPSS 18%

    horizontcms project · horizontcmsNov 4, 2020

  • CVE-2020-27955
    64This week

    Git LFS 2.12.0 allows Remote Code Execution.

    CriticalCVSS 9.8WeaponizedEPSS 82%

    git large file storage project · git large file storageNov 5, 2020

  • CVE-2020-12146
    43Plan

    Silver Peak Unity OrchestratorTM subject to path traversal.

    HighCVSS 8.8No exploitEPSS 27%

    silver-peak · unity orchestratorNov 5, 2020

  • CVE-2020-24430
    37Monitor

    Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution

    HighCVSS 7.8No exploitEPSS 18%

    adobe · acrobatNov 5, 2020

  • CVE-2020-24432
    34Monitor

    Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents

    HighCVSS 7.8No exploitEPSS 11%

    adobe · acrobatNov 5, 2020

  • CVE-2020-24433
    36Monitor

    Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component

    HighCVSS 7.8No exploitEPSS 15%

    adobe · acrobatNov 5, 2020

  • CVE-2020-24435
    47Plan

    Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution

    HighCVSS 7.8No exploitEPSS 52%

    adobe · acrobatNov 5, 2020

  • CVE-2020-24436
    36Monitor

    Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution

    HighCVSS 7.8No exploitEPSS 17%

    adobe · acrobatNov 5, 2020

  • CVE-2020-24437
    45Plan

    Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution

    HighCVSS 7.8No exploitEPSS 46%

    adobe · acrobatNov 5, 2020

  • CVE-2020-16846
    99Now

    An issue was discovered in SaltStack Salt through 3002.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    saltstack · saltNov 6, 2020

  • CVE-2020-25592
    60This week

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens.

    CriticalCVSS 9.8WeaponizedEPSS 56%

    saltstack · saltNov 6, 2020

  • CVE-2020-26214
    59Plan

    LDAP authentication bypass in Alerta

    CriticalCVSS 9.8Proof of conceptEPSS 65%

    alerta project · alertaNov 6, 2020

  • CVE-2020-27128
    44Plan

    Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability

    MediumCVSS 6.5No exploitEPSS 60%

    cisco · sd-wanNov 6, 2020

  • CVE-2020-28328
    54Plan

    SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting.

    HighCVSS 8.8WeaponizedEPSS 63%

    salesagility · suitecrmNov 6, 2020

  • CVE-2020-28347
    62This week

    tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter.

    CriticalCVSS 9.8WeaponizedEPSS 75%

    tp-link · ac1750 firmwareNov 8, 2020

  • CVE-2020-28351
    29Monitor

    The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site

    MediumCVSS 6.1Proof of conceptEPSS 15%

    mitel · shoretel firmwareNov 9, 2020

  • CVE-2020-27019
    27Monitor

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could

    MediumCVSS 5.5No exploitEPSS 17%

    trendmicro · interscan messaging security virtual applianceNov 9, 2020

  • CVE-2020-13927
    99Now

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security ri

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    apache · airflowNov 10, 2020

  • CVE-2020-17047
    38Monitor

    Windows Network File System Denial of Service Vulnerability

    HighCVSS 7.5No exploitEPSS 27%

    microsoft · windows 10Nov 11, 2020

  • CVE-2020-17049
    30Monitor

    Kerberos KDC Security Feature Bypass Vulnerability

    MediumCVSS 6.6No exploitEPSS 13%

    microsoft · windows server 2012Nov 11, 2020

  • CVE-2020-17051
    42Plan

    Windows Network File System Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 10%

    microsoft · windows server 2008Nov 11, 2020

  • CVE-2020-17083
    26Monitor

    Microsoft Exchange Server Remote Code Execution Vulnerability

    MediumCVSS 5.5No exploitEPSS 11%

    microsoft · exchange serverNov 11, 2020

  • CVE-2020-17087
    63This week

    Windows Kernel Local Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 5%

    microsoft · windows 10 1507Nov 11, 2020

  • CVE-2020-1599
    28Monitor

    Windows Spoofing Vulnerability

    MediumCVSS 5.5No exploitEPSS 19%

    microsoft · windows 10Nov 11, 2020

  • CVE-2020-13954
    36Monitor

    Apache CXF Reflected XSS in the services listing page via the styleSheetPath

    MediumCVSS 6.1No exploitEPSS 40%

    apache · cxfNov 12, 2020

  • CVE-2020-27481
    42Plan

    An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPr

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    goodlayers · good learning management systemNov 12, 2020

  • CVE-2019-17566
    33Monitor

    Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes.

    HighCVSS 7.5No exploitEPSS 10%

    apache · batikNov 12, 2020

  • CVE-2020-27386
    57Plan

    An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary fil

    HighCVSS 8.8WeaponizedEPSS 72%

    flexdotnetcms project · flexdotnetcmsNov 12, 2020

  • CVE-2020-24719
    60This week

    Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.

    CriticalCVSS 9.8WeaponizedEPSS 23%

    couchbase · couchbase serverNov 12, 2020

  • CVE-2020-13638
    62This week

    lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation.

    CriticalCVSS 9.8Proof of conceptEPSS 76%

    rconfig · rconfigNov 13, 2020

  • CVE-2020-25695
    49Plan

    A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.

    HighCVSS 8.8No exploitEPSS 46%

    postgresql · postgresqlNov 15, 2020

  • CVE-2020-8271
    42Plan

    Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8

    CriticalCVSS 9.8No exploitEPSS 11%

    citrix · sd-wanNov 15, 2020

  • CVE-2020-27988
    48Plan

    Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).

    MediumCVSS 5.4No exploitEPSS 91%

    nagios · nagios xiNov 16, 2020

  • CVE-2020-27989
    31Monitor

    Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).

    MediumCVSS 5.4No exploitEPSS 34%

    nagios · nagios xiNov 16, 2020

  • CVE-2020-27990
    31Monitor

    Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).

    MediumCVSS 5.4No exploitEPSS 34%

    nagios · nagios xiNov 16, 2020

  • CVE-2020-27991
    31Monitor

    Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).

    MediumCVSS 5.4No exploitEPSS 34%

    nagios · nagios xiNov 16, 2020

  • CVE-2020-26217
    61This week

    Remote Code Execution in XStream

    HighCVSS 8.8Proof of conceptEPSS 85%

    xstream · xstreamNov 16, 2020

  • CVE-2020-27130
    56Plan

    Cisco Security Manager Path Traversal Vulnerability

    CriticalCVSS 9.1No exploitEPSS 65%

    cisco · security managerNov 17, 2020

  • CVE-2020-27131
    65This week

    Cisco Security Manager Java Deserialization Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 87%

    cisco · security managerNov 17, 2020

  • CVE-2020-7774
    60This week

    The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

    CriticalCVSS 9.8No exploitEPSS 69%

    y18n project · y18nNov 17, 2020

  • CVE-2020-28687
    39Monitor

    The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.

    HighCVSS 8.8Proof of conceptEPSS 12%

    artworks gallery in php\, css\, javascript\, and mysql project · artworks gallery in php\, css\, javascript\, and mysqlNov 17, 2020

  • CVE-2020-28688
    39Monitor

    The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.

    HighCVSS 8.8Proof of conceptEPSS 12%

    artworks gallery in php\, css\, javascript\, and mysql project · artworks gallery in php\, css\, javascript\, and mysqlNov 17, 2020

  • CVE-2020-28578
    61This week

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a sp

    CriticalCVSS 9.8No exploitEPSS 73%

    trendmicro · interscan web security virtual applianceNov 18, 2020

  • CVE-2020-28579
    50Plan

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a spec

    HighCVSS 8.8No exploitEPSS 50%

    trendmicro · interscan web security virtual applianceNov 18, 2020

  • CVE-2020-28580
    41Plan

    A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticate

    HighCVSS 7.2No exploitEPSS 44%

    trendmicro · interscan web security virtual applianceNov 18, 2020

  • CVE-2020-28581
    41Plan

    A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authentic

    HighCVSS 7.2No exploitEPSS 44%

    trendmicro · interscan web security virtual applianceNov 18, 2020

  • CVE-2020-8277
    46Plan

    A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versi

    HighCVSS 7.5Proof of conceptEPSS 54%

    nodejs · node.jsNov 18, 2020

  • CVE-2019-20933
    48Plan

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT tok

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    influxdata · influxdbNov 18, 2020

  • CVE-2020-28948
    45Plan

    Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

    HighCVSS 7.8Proof of conceptEPSS 47%

    php · archive tarNov 19, 2020

  • CVE-2020-28949
    86Now

    Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as fil

    HighCVSS 7.8KEVWeaponizedEPSS 84%

    php · archive tarNov 19, 2020

  • CVE-2020-13671
    76This week

    Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect exten

    HighCVSS 8.8KEVWeaponizedEPSS 36%

    drupal · drupalNov 20, 2020

  • CVE-2020-4006
    71This week

    VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerabili

    CriticalCVSS 9.1KEVWeaponizedEPSS 17%

    vmware · identity managerNov 23, 2020

  • CVE-2020-3984
    33Monitor

    The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-inject

    MediumCVSS 6.5No exploitEPSS 22%

    vmware · sd-wan orchestratorNov 24, 2020

  • CVE-2020-4000
    48Plan

    The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory

    HighCVSS 8.8No exploitEPSS 43%

    vmware · sd-wan orchestratorNov 24, 2020

  • CVE-2020-13942
    59Plan

    Remote Code Execution in Apache Unomi

    CriticalCVSS 9.8Proof of conceptEPSS 68%

    apache · unomiNov 24, 2020

  • CVE-2020-28976
    29Monitor

    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 27%

    canto · cantoNov 30, 2020

  • CVE-2020-28977
    26Monitor

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 15%

    canto · cantoNov 30, 2020

  • CVE-2020-28978
    26Monitor

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    MediumCVSS 5.3Proof of conceptEPSS 15%

    canto · cantoNov 30, 2020

  • CVE-2020-28926
    43Plan

    ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution.

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    readymedia project · readymediaNov 30, 2020

  • CVE-2020-29390
    51Plan

    Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthe

    CriticalCVSS 9.8Proof of conceptEPSS 39%

    zeroshell · zeroshellNov 30, 2020

  • CVE-2020-29395
    28Monitor

    The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

    MediumCVSS 6.1Proof of conceptEPSS 12%

    myeventon · eventonNov 30, 2020