CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- jenkins audit trail, jenkins project audit trail plugin +1 moreRequest logging bypass in Jenkins Audit Trail Plugin5.3 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreImproper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin8.8 High
- online bus booking system project bus booking systemIn SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin...9.8 Critical
- pyrocmsPyroCMS Vulnerable to CSRF4.3 Medium
- pyrocmsPyroCMS Vulnerable to CSRF7.1 High
- phpgurukul hostel management systemPHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian...5.4 Medium
- phpgurukul hospital management systemPHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor...5.4 Medium
- online bus booking system project bus booking systemIn SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in...6.1 Medium
- dlink dsr-250n firmwareAn issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script...5.5 Medium
- cisco staros, asr 5000 series software +1 moreCisco StarOS Privilege Escalation Vulnerability6.3 Medium
- cisco staros, asr 5000 series software +1 moreCisco StarOS Privilege Escalation Vulnerability4.4 Medium
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Missing Authentication Vulnerability6.5 Medium
- cisco nexus data brokerCisco Nexus Data Broker Software Path Traversal Vulnerability5.4 Medium
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability5.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability4.8 Medium
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance URL Filtering Bypass Vulnerability5.8 Medium
- cisco industrial network director, network level service +1 moreCisco Industrial Network Director Denial of Service Vulnerability6.5 Medium
- cisco video surveillance 8000 series ip cameras, 8000p ip camera firmware, 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability8.8 High
- cisco video surveillance 8000 series ip cameras, 8000p ip camera firmware, 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability6.5 Medium
- cisco sd-wan vmanage, sd-wan +1 moreCisco SD-WAN vManage Cross-Site Scripting Vulnerability6.4 Medium
- cisco webex teamsCisco Webex Teams Client for Windows DLL Hijacking Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Authorization Bypass Vulnerability7.7 High
- cisco firepower management center, secure firewall management center, sourcefire defense center +2 moreCisco Firepower Management Center Cross-Site Scripting Vulnerability5.4 Medium
wolfsslOSS-FuzzIndex-out-of-bounds in fp_read_radix_16No score- smarter coffee maker 1st generation** UNSUPPORTED WHEN ASSIGNED ** Smarter Coffee Maker before 2nd generation allows firmware...6.5 Medium
- soplanningSoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings....5.3 Medium
- glpi-project glpiSQL Injection in GLPI Search API5.0 Medium
- glpi-project glpiUser data exposure in GLPI5.3 Medium
- glpi-project glpiUnauthenticated Stored XSS in GLPI8.0 High
- glpi-project glpiSQL injection in GLPI8.7 High
- glpi-project glpiUnauthenticated File Deletion in GLPI7.4 High
- mcafee file and removable media protection, file & removable media protection (frp) +1 moreFile and Removable Media Protection update fixes one vulnerability6.6 Medium
- sympa, debian linux, fedoraproject fedora +2 moreSympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full...7.8 High
- wpcoursesplugin wp-coursesThe wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended...7.5 High
- impresscmsCross-site scripting (XSS)4.8 Medium
- gitlabAn issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2:...2.7 Low
- cure53 dompurify, debian linux, microsoft visual studio 2017 +2 more +4 moreCross-site Scripting in dompurify6.1 Medium
- elementor proThe Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote...8.8 High
- peplink balance 1350 firmware, balance 20 firmware, balance 20x firmware +52 more +54 morePeplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration...7.5 High
- mikrotik routerosAn integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote...7.5 High
- exposure notifications project notifications** DISPUTED ** An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications)...5.9 Medium
- getsymphony symphonyCross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject...5.4 Medium
- gitlabMembership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10,...6.5 Medium
- gitlabIn GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non...5.9 Medium
- gitlab, gitlab runner +1 moreA command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3...9.1 Critical
- gitlabImproper group membership validation when deleting a user account in GitLab >=7.12 allows a user...4.3 Medium
- qemuAn issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the...5.5 Medium
- monocmsMonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files...8.1 High
- simpl-schema project simpl-schemaPrototype Pollution7.5 High
- kde kdeconnect, opensuse backports sle, leap +2 moreIn kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send...5.5 Medium
- Show moreLoading…