2020-10-09

2020-10-10

2020-10-11

All (2) Critical (2) High (2) Medium (2)

CVE-2020-26948 Oct 10, 21:15 CRITICAL POC THREAT Act Now

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Emby

NVD GitHub

CVSS 3.1

9.8

EPSS

87.2%

CVE-2020-26935 Oct 10, 19:15 CRITICAL POC PATCH THREAT Act Now

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

SQLi Debian Debian Linux Fedora Leap +4

NVD

CVSS 3.1

9.8

EPSS

67.1%