CVEs published November 1, 2020
8 CVEs were published on November 1, 2020: 1 critical, 1 high. 1 is now in CISA KEV.
- Published
- 8
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- Openfind MailGates · Openfind MailAudit
- 1
- Oracle WebLogic Server
- 1
- ServiceStack
- 1
Critical 1
High 1
Medium, low and unrated 6
- CVE-2020-28044An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable th
- CVE-2020-28045An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R.
- CVE-2020-28046An issue was discovered in ProlinOS through 2.4.161.8859R.
- CVE-2020-28043MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL.
- CVE-2020-28042ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes aServiceStack
- CVE-2020-28041The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and