CVEs published November 15, 2020
8 CVEs were published on November 15, 2020: 0 critical, 1 high.
- Published
- 8
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- controlled-merge
- 1
- doc-path
- 1
High 1
Medium, low and unrated 7
- CVE-2019-19561A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to o
- CVE-2019-19557A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obt
- CVE-2019-19563A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to o
- CVE-2019-19560An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to ob
- CVE-2019-19556An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obta
- CVE-2019-19562An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to ob
- CVE-2020-28268Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lecontrolled-merge