CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege...7.8 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can...5.5 Medium
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory...7.1 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied...7.8 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data...5.5 Medium
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data...7.1 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the...7.8 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel...7.1 High
- ory fositeOAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses6.1 Medium
- ory fositeRedirect URL matching ignores character casing6.1 Medium
- damstratechnology smart assetAn issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource...9.8 Critical
- damstratechnology smart assetAn issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid...5.3 Medium
- damstratechnology smart assetDamstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This...9.1 Critical
- fusionauth samlv2FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass...9.1 Critical
- gitlabAn issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for...7.2 High
- zohocorp manageengine desktop central, manageengine remote access plus +1 moreA design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and...8.1 High
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An...7.2 High
- vaporArbitrary file read un Vapor8.5 High
- hpe kvm ip console switch g2 firmwareA remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s):...8.8 High
- hpe kvm ip console switch g2 firmwareA remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2...5.4 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is...6.5 Medium
- nvidia gpu display driver, virtual gpu manager +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...4.4 Medium
- nvidia gpu display driver, virtual gpu manager +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user...7.8 High
- nvidia gpu display driver, virtual gpu manager +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components...7.8 High
- nvidia gpu display driver, virtual gpu manager +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control...7.8 High
- linux kernelThe Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature...6.5 Medium
- cloud foundry bosh system metrics serverUAA password may appear in BOSH System Metrics Server process arguments6.5 Medium
cryptoauthlibPyPIBuffer overflow in deprecated USB HALs and stack overflow in USB enumerationNo score- socket.io-file project socket.io-fileFile restriction bypass in socket.io-file7.8 High
- cloudflare cloudflaredLocal Privilege Escalation in cloudflared6.4 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Medium
- get-simple getsimplecmsGetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete...9.1 Critical
- bluditBludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary...9.1 Critical
- pluxmlclass.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the...9.8 Critical
- pluxxmlIn PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote...7.2 High
- erlang erlang\/otpErlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker...7.5 High
- shiba project shibaArbitrary Code Execution8.3 High
- bitdefender enginesBitdefender ceva_emu.cvd module denial-of-service (VA-8766)5.9 Medium
- safetydance project safetydancePrototype Pollution7.3 High
- bmoor project bmoorPrototype Pollution7.3 High
permissionsSUSESecurity update for permissionsNo score- sysaid on-premises, sysaidsy on-premises +1 moreSysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.6.1 Medium
- livehelperchat live helper chatLive Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.6.1 Medium
- livehelperchat live helper chatLive Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.6.1 Medium
- openmediavaultopenmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection...8.8 High
- qemufdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block...3.2 Low
- powerdns authoritativeAn issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss...9.8 Critical
- powerdns authoritativeAn issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss...7.5 High
- Show moreLoading…