Security Vulnerabilities - CVEs Published In 2020
All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.
CVSS Score
5.3
EPSS Score
0.016
Published
2020-11-11
The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.
CVSS Score
7.5
EPSS Score
0.042
Published
2020-11-11
Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.
CVSS Score
7.2
EPSS Score
0.017
Published
2020-11-11
External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via improper input validation of an HTTP request, where the content for the attack has been loaded into ePO by an ePO administrator.
CVSS Score
7.2
EPSS Score
0.022
Published
2020-11-11
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVSS Score
5.4
EPSS Score
0.016
Published
2020-11-11
Windows Spoofing Vulnerability
CVSS Score
5.5
EPSS Score
0.191
Published
2020-11-11
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.009
Published
2020-11-11
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
CVSS Score
5.3
EPSS Score
0.033
Published
2020-11-11
Microsoft Teams Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.019
Published
2020-11-11
Visual Studio Tampering Vulnerability
CVSS Score
5.5
EPSS Score
0.008
Published
2020-11-11