Security Vulnerabilities - CVEs Published In 2020
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
CVSS Score
6.6
EPSS Score
0.008
Published
2020-09-01
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.
CVSS Score
7.5
EPSS Score
0.031
Published
2020-09-01
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.
CVSS Score
9.6
EPSS Score
0.022
Published
2020-09-01
The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504.
CVSS Score
5.5
EPSS Score
0.004
Published
2020-09-01
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020).
CVSS Score
9.8
EPSS Score
0.004
Published
2020-08-31
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020).
CVSS Score
7.5
EPSS Score
0.004
Published
2020-08-31
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020).
CVSS Score
7.8
EPSS Score
0.001
Published
2020-08-31
An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020).
CVSS Score
9.8
EPSS Score
0.004
Published
2020-08-31