CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- powerdns authoritativeAn issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss...8.1 High
- msi ambientlink mslo64 firmwareThe MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044,...7.8 High
- secudos qiata ftaAn issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS...6.1 Medium
- secudos domosconf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root...7.5 High
- wavlink wn530h4 firmwareAn information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the...7.5 High
- wavlink wn530h4 firmwareMultiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4...9.8 Critical
- wavlink wn530h4 firmwareA remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK...9.8 Critical
- wavlink wn530h4 firmwareA remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the...9.8 Critical
- wavlink wn530h4 firmwareCSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow...8.1 High
- reddoxx maildepotREDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not...7.4 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer...5.5 Medium
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened...7.5 High
- filecloudCodeLathe FileCloud before 20.2.0.11915 allows username enumeration.5.3 Medium
- froala editorFroala WYSIWYG Editor XSS Vulnerability6.1 Medium
- artifex mupdf, debian linux, fedoraproject fedora +2 morefitz/pixmap.c in Artifex MuPDF 1.17.0 has an overflow during pixmap size calculation.5.5 Medium
- artica pandora fmsArtica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks...9.8 Critical
- wpo365 wordpress \+ azure ad \/ microsoft office 365The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt...7.5 High
hostapOSS-FuzzHeap-buffer-overflow in x509_parse_ext_basic_constraintsNo scoreunicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scoremysql-serverOSS-FuzzUNKNOWN READ in net_field_length_sizeNo scorelibresslOSS-FuzzHeap-buffer-overflow in do_print_exNo scorehostapOSS-FuzzHeap-buffer-overflow in asn1_get_nextNo scoreopenh264OSS-FuzzHeap-buffer-overflow in DeblockChromaLt42_cNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::UpdateP16x16RefIdxNo scorestbOSS-FuzzHeap-buffer-overflow in stbi__tga_loadNo scorearrowOSS-FuzzHeap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadataNo scorestbOSS-FuzzUse-of-uninitialized-value in stbi__expand_png_paletteNo score- redhat libvirt, opensuse leap +1 moreA double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,...6.7 Medium
- dell cpg bios, xps 13 9370 firmware +1 moreDell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling...2.3 Low
- apache nifiInadequate Encryption Strength in Apache NiFi7.5 High
- apache nifiImproper Restriction of XML External Entity Reference in Apache NiFi5.5 Medium
- apache nifiMissing Authentication for Critical Function in Apache NiFi7.5 High
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi Stateless7.5 High
- teltonika-networks trb245 firmwareRelative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated...6.5 Medium
- teltonika-networks trb245 firmwareRelative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated...6.5 Medium
- teltonika-networks trb245 firmwareInsufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an...6.1 Medium
- teltonika-networks trb245 firmwareCross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to...8.8 High
- teltonika-networks trb245 firmwareRelative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated...6.5 Medium
- teltonika-networks trb245 firmwareServer-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user...6.5 Medium
- hcl software digital experienceHCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The...6.1 Medium
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache Ant7.5 High
- debian linux, nette application +1 moreRemote Code Execution vulnerability8.7 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and...9.8 Critical
- mozilla firefoxWhen processing a MAR update file, after the signature has been validated, an invalid name length...8.8 High
- mozilla firefox for android, firefox mobile +1 moreWhen typing in a password under certain conditions, a race may have occured where the...3.1 Low
- Show moreLoading…