|
210291
|
8.8 |
HIGH
Network
|
google debian fedoraproject opensuse
|
chrome debian_linux fedora backports_sle
|
Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-15968
|
2024-11-21 14:06 |
2020-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210292
|
8.8 |
HIGH
Network
|
google fedoraproject opensuse debian
|
chrome fedora backports_sle debian_linux
|
Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-15967
|
2024-11-21 14:06 |
2020-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210293
|
5.4 |
MEDIUM
Network
|
ea
|
origin_client
|
A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker to execute arbitrary Javascript in a target user’s Origin c…
|
CWE-79
Cross-site Scripting
|
CVE-2020-15914
|
2024-11-21 14:06 |
2020-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210294
|
3.3 |
LOW
Local
|
aptdaemon_project
|
aptdaemon
|
There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink i…
|
CWE-22
Path Traversal
|
CVE-2020-15703
|
2024-11-21 14:06 |
2020-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210295
|
6.1 |
MEDIUM
Network
|
thembay
|
greenmart
|
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-16140
|
2024-11-21 14:06 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210296
|
7.5 |
HIGH
Network
|
arista
|
eos
|
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed li…
|
NVD-CWE-noinfo
|
CVE-2020-15897
|
2024-11-21 14:06 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210297
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox
|
Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl…
|
CWE-416
Use After Free
|
CVE-2020-15684
|
2024-11-21 14:06 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210298
|
9.8 |
CRITICAL
Network
|
mozilla debian opensuse
|
firefox_esr thunderbird firefox debian_linux leap
|
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enoug…
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2020-15683
|
2024-11-21 14:06 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210299
|
6.5 |
MEDIUM
Network
|
mozilla
|
firefox
|
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an o…
|
CWE-346
Origin Validation Error
|
CVE-2020-15682
|
2024-11-21 14:06 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210300
|
7.5 |
HIGH
Network
|
mozilla
|
firefox
|
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potential…
|
NVD-CWE-noinfo
|
CVE-2020-15681
|
2024-11-21 14:06 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|