2020-11-25

2020-11-26

2020-11-27

All (2) Critical (2) High (7) Medium (8) Low (1)

CVE-2020-29128 Nov 26, 05:15 CRITICAL PATCH Act Now

petl before 1.68, in some configurations, allows resolution of entities in an XML document. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Petl

NVD GitHub

CVSS 3.1

9.8

EPSS

2.3%

CVE-2020-27251 Nov 26, 02:15 CRITICAL Act Now

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Factorytalk Linx Rockwellautomation

NVD

CVSS 3.1

9.8

EPSS

5.5%