CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
firestoreOSS-FuzzUNKNOWN WRITE in pb_release_single_fieldNo scoreleptonicaOSS-FuzzHeap-buffer-overflow in pixFindHorizontalRunsNo score- canonical linux kernel, ubuntu linux, debian linux +1 more +3 moreDCCP CCID structure use-after-free6.3 Medium
- jfrog artifactoryJFrog Artifactory does not enforce default admin password change9.8 Critical
- sonatype nexus repository managerA Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14...8.6 High
- evolutionscript helpdeskz** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in HelpDeskZ 1.0.2. The feature to auto...7.5 High
- junit junit4, apache pluto, debian linux +1 more +3 moreInformation disclosure in JUnit44.4 Medium
- octopus deployIn Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user...7.5 High
- webminXSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module ...6.1 Medium
- webminAn Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the...5.4 Medium
- webminAn XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands...5.4 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability....5.5 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure...4.6 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write...5.5 Medium
- arc informatique pcvueARC Informatique PcVue Deserialization of Untrusted Data9.8 Critical
- arc informatique pcvueARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- arc informatique pcvueARC Informatique PcVue Access to Critical Private Variable via Public Method7.5 High
- apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Medium
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability....4.6 Medium
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160...7.8 High
- huawei laya-al00ep firmware, mate 20 firmware, mate 20 x firmware +3 more +5 moreThere is an information disclosure vulnerability in several smartphones. The device does not...4.6 Medium
- huawei hirouter-cd30-10 firmware, hirouter-ct31-10 firmware, ws5200-12 firmware +4 more +6 moreSome Huawei products have an insufficient input verification vulnerability. Attackers can exploit...6.5 Medium
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write...5.5 Medium
- huawei taurus-al00a, taurus-al00a firmware +1 moreTaurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module....5.5 Medium
- huawei fusionaccessFusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized...7.8 High
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write...5.5 Medium
- huawei ws5800-10, ws5800-10 firmware +1 moreWS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification...6.5 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability....6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting....6.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote...5.2 Medium
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could...6.8 Medium
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users...4.8 Medium
- ibm security guardiumIBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files...4.9 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing...6.5 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the...5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...4.9 Medium
- samsung updateSamsung Update Local Privilege Escalation Vulnerability6.2 Medium
- ibm curam social program management, curam spm +1 moreAn improper input validation before calling java readLine() method may impact IBM Curam Social...6.5 Medium
- ibm curam social program management, curam spm +1 moreOOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam...4.3 Medium
- ibm curam social program management, curam spm +1 moreA HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0...8.1 High
- ibm curam social program management, curam spm +1 moreIBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a...5.9 Medium
- ibm curam social program management, curam spm +1 moreA path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10,...5.3 Medium
- ibm curam social program management, curam spm +1 moreA cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9...5.4 Medium
- ibm curam social program management, curam spm +1 moreAn XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by...5.4 Medium
- ibm curam social program management, curam spm +1 moreA cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management...6.5 Medium
- ibm curam social program management, curam spm +1 moreAn XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program...7.1 High
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...5.3 Medium
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...5.3 Medium
- Show moreLoading…