CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...5.3 Medium
- sonicwall sonicos, sonicosv +1 moreSonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management...5.3 Medium
- sonicwall sonicos, sonicosv +1 moreA stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A...6.1 Medium
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist...6.5 Medium
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service ...7.5 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause...7.5 High
- sonicwall sonicos, sonicosv +1 moreA Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause...7.5 High
- sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause...7.5 High
- sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of...6.5 Medium
- sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service ...9.8 Critical
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file...6.5 Medium
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service...7.5 High
- atlassian jira, jira server +1 moreAffected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or...5.4 Medium
leptonicaOSS-FuzzHeap-use-after-free in fpixChangeRefcountNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_msgpack_to_jsonNo scorepermissionsopenSUSESecurity update for permissionsNo score- linux kernelA flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to...7.8 High
fluent-bitOSS-FuzzStack-buffer-overflow in flb_sds_catNo score- embyEmby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.9.8 Critical
- getmonero moneromonero-wallet-gui in Monero GUI 0.17.0.1 includes the . directory in an embedded RPATH (with a...7.8 High
- mybatis"Deserialization errors in MyBatis"8.1 High
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin Cross-site Scripting (XSS)6.1 Medium
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin SQL injection vulnerability9.8 Critical
- hackerone nextcloud server, nextcloud server +1 moreA logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it...7.5 High
wolfsslOSS-FuzzUNKNOWN WRITE in wolfCrypt_custom_freeNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecodingNo score- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClient5.3 Medium
- apache calciteMissing Authentication for Critical Function in Apache Calcite5.9 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation...6.7 Medium
- garfield petshop project petshopA cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop...8.8 High
- xerox workcentre ec7836 firmware, workcentre ec7856 firmware +1 moreXerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices...6.1 Medium
- connectwise automateThe Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because...8.8 High
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40...9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear rbk752 firmware, rbk852 firmware, rbr750 firmware +3 more +5 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752...9.6 Critical
- netgear rbk752 firmware, rbk852 firmware, rbr750 firmware +3 more +5 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...9.6 Critical
- netgear rbk852 firmware, rbr850 firmware, rbs850 firmware +2 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +12 more +14 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00...9.4 Critical
- netgear d7800 firmware, r7500v2 firmware +1 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear cbr40 firmware, rbk752 firmware, rbk852 firmware +4 more +6 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +11 more +13 moreCertain NETGEAR devices are affected by lack of access control at the function level. This...8.3 High
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +11 more +13 moreCertain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1...7.5 High
- netgear d6100 firmware, r7800 firmware, r8900 firmware +18 more +20 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +11 more +13 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.7 Medium
- Show moreLoading…