# CVEs published 2020-11-07

3 CVEs were published on November 7, 2020: 0 critical, 2 high. Days are UTC.

- [CVE-2020-28339](https://cve.now/CVE-2020-28339.md): The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces\_unserialize. (CVSS 7.5)
- [CVE-2020-16122](https://cve.now/CVE-2020-16122.md): Packagekit's apt backend lets user install untrusted local packages (CVSS 8.2, packagekit)
- [CVE-2020-16121](https://cve.now/CVE-2020-16121.md): PackageKit error messages leak presence and mimetype of files to unprivileged users (CVSS 3.3, PackageKit)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.