MD
Product
Max Data
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 2Low 0
Watch
Add Max Data to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: All versions, or not specified |
| CVE-2020-7699 | 9.8 | Jul 30 | This affects the package express-fileupload before 1.1.8 Affected: All versions, or not specified |
| CVE-2020-15801 | 9.8 | Jul 17 | In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations Affected: All versions, or not specified |
| CVE-2020-14968 | 9.8 | Jun 22 | An issue was discovered in the jsrsasign package before 8.0.17 for Node.js Affected: All versions, or not specified |
| CVE-2020-14967 | 9.8 | Jun 22 | An issue was discovered in the jsrsasign package before 8.0.18 for Node.js Affected: All versions, or not specified |
| CVE-2020-14966 | 7.5 | Jun 22 | An issue was discovered in the jsrsasign package through 8.0.18 for Node.js Affected: All versions, or not specified |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: All versions, or not specified |
Showing 7