CVEs published September 27, 2020
11 CVEs were published on September 27, 2020: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- mediawiki/core
- 6
- libpython · python +1
- 1
Medium, low and unrated 11
- CVE-2020-25813In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.mediawiki/core
- CVE-2020-25827An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4.mediawiki/core
- CVE-2020-25869An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4.
- CVE-2020-25828An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4.mediawiki/core
- CVE-2020-25814In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur.mediawiki/core
- CVE-2020-25815An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4.mediawiki/core
- CVE-2020-25812An issue was discovered in MediaWiki 1.34.x before 1.34.4.mediawiki/core
- CVE-2020-26121An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4.
- CVE-2020-26120XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex section line replacem
- CVE-2020-26117In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.
- CVE-2020-26116http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacklibpython · python +1