2020-11-25

2020-11-26

2020-11-27

All (2) Critical (2) High (7) Medium (8) Low (1)

CVE-2020-29128 CRITICAL PATCH Act Now

petl before 1.68, in some configurations, allows resolution of entities in an XML document. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Petl

NVD GitHub

CVSS 3.1

9.8

EPSS

2.3%

CVE-2020-27251 CRITICAL Act Now

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Heap Overflow Factorytalk Linx

NVD

CVSS 3.1

9.8

EPSS

5.5%