2020-10-06

2020-10-07

2020-10-08

All (3) Critical (3) High (9) Medium (14) Low (1)

CVE-2020-11800 Oct 07, 16:15 CRITICAL Act Now

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Debian Debian Linux Leap Zabbix +2

NVD

CVSS 3.1

9.8

EPSS

9.2%

CVE-2020-15175 Oct 07, 19:15 CRITICAL PATCH Act Now

In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Information Disclosure Path Traversal Glpi Glpi Project

NVD GitHub

CVSS 3.1

9.1

EPSS

71.4%

CVE-2020-13347 Oct 07, 14:15 CRITICAL Act Now

A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Docker Path Traversal Command Injection Gitlab Microsoft

NVD

CVSS 3.1

9.1

EPSS

2.3%