CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- pritunlPritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth...5.3 Medium
- actions toolkitEnvironment Variable Injection in GitHub Actions3.5 Low
- rittal cmc pu iii 7030.000 firmwareThe Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to...6.1 Medium
- envoyproxy envoyEnvoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update8.3 High
- istioAuthorization bypass in Istio6.8 Medium
- unisys stealthUnisys Stealth(core) before 4.0.132 stores Passwords in a Recoverable Format.7.8 High
- ibm websphere application serverIBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker...5.3 Medium
- websitebakerWebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin...9.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit...5.4 Medium
- get-simple getsimple cmsGetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site...5.4 Medium
- bitdefender enginesBitdefender ace.xmd parser out-of-bounds write (VA-8772)5.9 Medium
rustseccrates.ioObsolete versions of the `rustsec` crate do not support the new V3 advisory formatNo scorepermissionsSUSESecurity update for permissionsNo score- atlassian @atlaskit/editor-core, editor-core +1 moreCross-site scripting in @atlaskit/editor-core5.4 Medium
- atlassian crowdUpgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected...7.5 High
- ruby-lang ruby, webrick, fedoraproject fedora +2 moreWEBRick vulnerable to HTTP Request/Response Smuggling7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 moreu'Two threads running simultaneously from user space can lead to race condition in fastRPC driver...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 moreu'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 moreu'Out of bound access can happen in MHI command process due to lack of check of channel id value...7.8 High
- google android, debian linux +1 moreIn binder_release_work of binder.c, there is a possible use-after-free due to improper locking....7.8 High
- google androidIn constructImportFailureNotification of NotificationImportExportListener.java, there is a...3.3 Low
- google androidIn appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error...7.8 High
- google androidIn setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a...7.8 High
- google androidIn generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI...5.5 Medium
- google androidIn multiple settings screens, there are possible tapjacking attacks due to an insecure default...8.8 High
- google androidIn various locations in SystemUI, there is a possible permission bypass due to an unsafe...5.5 Medium
- google androidIn AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non...6.5 Medium
- google androidIn gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a...7.5 High
- google androidIn setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check....3.3 Low
- google androidIn ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to...6.5 Medium
- google androidIn setNotification of SapServer.java, there is a possible permission bypass due to a...5.5 Medium
- google androidIn remove of String16.cpp, there is a possible out of bounds write due to an integer overflow....7.8 High
- google androidIn showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due...5.5 Medium
- google androidIn updateMwi of NotificationMgr.java, there is a possible permission bypass due to a...5.5 Medium
- google androidIn onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could...5.5 Medium
- google androidIn gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a...7.5 High
- google androidThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions:...9.1 Critical
- google androidThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions:...9.1 Critical
- google androidThere is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions:...9.1 Critical
- google androidThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions:...9.1 Critical
- google androidThere is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions:...9.1 Critical
- google androidIn getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This...5.5 Medium
- google androidIn SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code...7.8 High