CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
sane-backendsDebiansane-backends - regression updateNo score- sympa, debian linux +1 moredebian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for...4.3 Medium
- google chrome, apple ipados, iphone os +7 more +9 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- atlassian jira, jira server +1 moreAffected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin)...4.3 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...8.8 High
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows...7.5 High
- google androidAn issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q...7.5 High
- google androidAn issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0)...7.5 High
- google androidAn issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets)...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0)...7.5 High
- google androidAn issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen...5.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to...4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS...5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized...7.5 High
- horazont xmpp-http-uploadDirectory Traversal in xmpp-http-upload3.5 Low
- google androidAn issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi...7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The...7.5 High
- electronContext isolation bypass in Electron5.6 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 moreA stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android...9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android...7.8 High
- facebook whatsapp for android, whatsapp +1 moreMedia ContentProvider URIs used for opening attachments in other apps were generated sequentially...3.3 Low
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreA path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior...5.5 Medium
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreAn issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and...5.5 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20...7.5 High
- facebook whatsapp for ios, whatsapp +1 moreReceiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have...5.3 Medium
- hcltech appscan"HCL AppScan Enterprise security rules update administration section of the web application...7.5 High
- hcltech appscan"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API...5.3 Medium
- node-pdf-generator project node-pdf-generatorServer-side Request Forgery (SSRF)8.2 High
- ibm datapower gatewayIBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow...5.9 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This...6.1 Medium
- dlink dap-1360u firmwareD-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary...8.8 High
- phantomjs-seo project phantomjs-seoServer-side Request Forgery (SSRF)8.2 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector...7.5 High
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash....7.5 High
- leostream connection broker** UNSUPPORTED WHEN ASSIGNED ** Leostream Connection Broker 8.2.x is affected by stored XSS. An...9.6 Critical
- hello.js project hello.jsCross-site Scripting (XSS)9.9 Critical
- reddoxx maildepotREDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.8.8 High
- electronUnpreventable top-level navigation in Electron7.5 High
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.4.2 Medium
- qemupci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because...3.2 Low
- qemu, redhat enterprise linux, openstack platform +2 morehw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a...3.2 Low
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.4.2 Medium
- sierrawireless aleosALEOS LAN-Side RPC Service Remote Code Execution7.5 High
- sierrawireless aleosLack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation...7.8 High
- Show moreLoading…