CVEs published October 10, 2020
6 CVEs were published on October 10, 2020: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- phpmyadmin/phpmyadmin
- 2
- org.mybatis:mybatis
- 1
Medium, low and unrated 6
- CVE-2020-26948Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.
- CVE-2020-26947monero-wallet-gui in Monero GUI before 0.17.1.0 includes the .
- CVE-2020-26945MyBatis before 3.5.6 mishandles deserialization of object streams.org.mybatis:mybatis
- CVE-2020-26934phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.phpmyadmin/phpmyadmin
- CVE-2020-26935An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.phpmyadmin/phpmyadmin
- CVE-2020-26932debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended pe