MCERT

CVE-2020-15649 (firefox_esr)

12th August 2020 - 19:37

Given an installed malicious file picker application| an attacker was able to steal and upload local files of their choosing| regardless of the actual... Read more

CVE-2020-15650 (firefox_esr)

12th August 2020 - 19:37

Given an installed malicious file picker application| an attacker was able to overwrite local files and thus overwrite Firefox settings (but not acces... Read more

CVE-2020-15651 (firefox)

12th August 2020 - 19:37

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extensi... Read more

CVE-2020-17446

12th August 2020 - 19:37

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server re... Read more

CVE-2020-17479 (json_pattern_validator)

12th August 2020 - 19:37

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input| as demonstrated by a corrupted array. Link: https://web.nvd.nist.gov/... Read more