2020-11-27

2020-11-28

2020-11-29

CVE-2020-29373 MEDIUM POC PATCH This Month

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. Public exploit code available.

Linux Path Traversal Linux Kernel

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2020-29372 MEDIUM POC PATCH This Month

An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. Rated medium severity (CVSS 4.7). Public exploit code available.

Information Disclosure Race Condition Linux Linux Kernel Ubuntu Linux

NVD VulDB

CVSS 3.1

4.7

EPSS

0.1%

CVE-2020-27218 MEDIUM PATCH This Month

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Code Injection Jetty Oncommand System Manager Snap Creator Framework Blockchain Platform +13

NVD GitHub

CVSS 3.1

4.8

EPSS

8.1%