CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +8 more +10 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +11 more +13 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...5.4 Medium
- netgear ex7000 firmware, r6250 firmware, r6400 firmware +6 more +8 moreCertain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250...4.1 Medium
- netgear ex7000 firmware, r6250 firmware, r6400 firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250...4.1 Medium
- netgear jgs516pe devices, jgs516pe firmware +1 moreNETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function...9.8 Critical
- netgear srk60 firmware, srr60 firmware, srs60 firmware +2 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear gs110emx firmware, gs810emx firmware, xs512em firmware +1 more +3 moreCertain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1...8.3 High
- netgear wc7500 firmware, wc7600 firmware, wc7600v2 firmware +1 more +3 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.4 Medium
- netgear wc7500 firmware, wc7600 firmware, wc7600v2 firmware +1 more +3 moreCertain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600...4.3 Medium
- netgear wac720 firmware, wac730 firmware +1 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC720...3.1 Low
- netgear gs808e firmwareNETGEAR GS808E devices before 1.7.1.0 are affected by denial of service.3.2 Low
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10...9.6 Critical
- netgear ac2100 firmware, ac2400 firmware, ac2600 firmware +14 more +16 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00...9.4 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10...9.6 Critical
- netgear r6220 firmware, r6230 firmware +1 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.3 High
- netgear ex7700 firmwareNETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security...3.3 Low
- netgear wc7500 firmware, wc7600 firmware, wc9500 firmware +2 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500...5.9 Medium
- oneplus app lockerOnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google...4.6 Medium
openh264OSS-FuzzHeap-buffer-overflow in McChromaWithFragMv_cNo scoreusrsctpOSS-FuzzHeap-buffer-overflow in sctp_process_initNo scorepcapplusplusOSS-FuzzBad-cast to pcpp::IDnsResource from invalid vptrNo score- smartstore, smartstore smartstorenet +1 moreWebApi Authentication attribute missing in Smartstore9.1 Critical
- nahimic apo software componentAn escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1...7.8 High
pterodactyl/panelPackagistXSS vulnerability when listing users on add & modify server pages.No score- faulknermedia wildlife issues in the new millenniumFaulkner Wildlife Issues in the New Millennium 18.0.160 on Windows allows local, low-privileged...7.8 High
- fluid-cloudnative fluid, typo3 fluid engine, typo3 +2 moreCross-Site Scripting in TYPO3 Fluid Engine4.7 Medium
- vercel next.jsOpen Redirect in Next.js4.7 Medium
- facebook hermesAlways-Incorrect Control Flow Implementation in Facebook Hermes9.8 Critical
- johnsoncontrols victor web client, johnson controls victor web client version 5.4.1 and prior, tyco c-cure web client +2 morevictor Web Client - Arbitrary File Deletion Vulnerability7.1 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker...7.5 High
- formalmsforma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php...8.8 High
- dell emc openmanage integration for microsoft system center, omimssc (openmanage integration for microsoft system center) +1 moreDell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...9.0 Critical
- gitlabAn issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2:...5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...8.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...5.7 Medium
- hapifhir testpage overlayUsers of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to...6.1 Medium
- ibm informix dynamic serverIBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due...7.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the...6.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be...7.5 High
- jenkins nerrvana, jenkins project nerrvana plugin +1 moreXXE vulnerability in Jenkins Nerrvana Plugin6.5 Medium
- jenkins sms notification, jenkins project sms notification plugin +1 moreAccess token stored in plain text by Jenkins SMS Notification Plugin3.3 Low
- jenkins shared objects, jenkins project shared objects plugin +1 moreCSRF vulnerability in Jenkins Shared Objects Plugin4.3 Medium
- barchart maven cascade release, jenkins project maven cascade release plugin +1 moreCSRF vulnerability in Jenkins Maven Cascade Release Plugin6.5 Medium
- barchart maven cascade release, jenkins project maven cascade release plugin +1 moreMissing permission checks in Jenkins Maven Cascade Release Plugin6.5 Medium
- jenkins persona, jenkins project persona plugin +1 moreArbitrary file read vulnerability in Jenkins Persona Plugin6.5 Medium
- jenkins release, jenkins project release plugin +1 moreStored XSS vulnerability in Jenkins Release Plugin5.4 Medium
- jenkins couchdb-statistics, jenkins project couchdb-statistics plugin +1 morePassword stored in plain text by Jenkins couchdb-statistics Plugin3.3 Low
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices Plugin5.4 Medium
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices Plugin5.4 Medium
- jenkins audit trail, jenkins project audit trail plugin +1 moreIncorrect default pattern in Jenkins Audit Trail Plugin5.3 Medium
- Show moreLoading…