Security Vulnerabilities - CVEs Published In 2020
Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).
CVSS Score
7.5
EPSS Score
0.014
Published
2020-09-25
Pexip Infinity before 18 allows remote Denial of Service (XML parsing).
CVSS Score
7.5
EPSS Score
0.014
Published
2020-09-25
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
CVSS Score
7.2
EPSS Score
0.014
Published
2020-09-25
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.
CVSS Score
7.2
EPSS Score
0.015
Published
2020-09-25
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
CVSS Score
9.8
EPSS Score
0.014
Published
2020-09-25
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP.
CVSS Score
7.5
EPSS Score
0.011
Published
2020-09-25
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.
CVSS Score
7.5
EPSS Score
0.011
Published
2020-09-25
A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.
CVSS Score
8.8
EPSS Score
0.008
Published
2020-09-25
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.
CVSS Score
6.1
EPSS Score
0.008
Published
2020-09-25
vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.
CVSS Score
7.5
EPSS Score
0.024
Published
2020-09-24