CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- telegram desktopTelegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within...2.4 Low
- blackberry uem, unified endpoint manager +1 moreAn improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0,...5.5 Medium
- adobe flash playerExploitable NULL pointer deref could lead to arbitrary code execution7.0 High
- laquisscada scada, lcds—leão consultoria e desenvolvimento de sistemas ltda me laquis scada +1 moreAn attacker who convinces a valid user to open a specially crafted project file to exploit could...7.8 High
- rockwellautomation allen-bradley flex io 1794-aent\/b firmware, talos allen bradley +1 moreAn exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment...7.5 High
- iproom mmc+ server, mmc\+ +1 moreIProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')6.1 Medium
- rockwellautomation flex i\/o 1794-aent\/b firmware, talos allen bradley +1 moreAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment...7.5 High
- rockwellautomation flex i\/o 1794-aent\/b firmware, talos allen bradley +1 moreAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment...7.5 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) trial +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP) trial7.5 High
openh264OSS-FuzzHeap-buffer-overflow in WelsDec::DecodeCurrentAccessUnitNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in encoded_to_bufNo scoreopenh264OSS-FuzzUse-of-uninitialized-value in WelsDec::NeedErrorConNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::DoErrorConSliceCopyNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSliceNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0No scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecodingNo scorewolfsslOSS-FuzzHeap-buffer-overflow in fp_to_unsigned_bin_at_posNo score- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson Databind7.5 High
- bluezlinux - security update6.5 Medium
- unitedplanet intrexxCross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx...6.1 Medium
- bluez, linux kernel +1 morelinux-4.19 - security update6.5 Medium
- bluez, linux kernel +1 moreCVE-2020-12351 does not affect BellSoft software8.8 High
- amd atikmdag.sysA denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of...5.5 Medium
- amd ryzen masterA vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any...7.8 High
- amd atikmdag.sysA denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve...7.5 High
- apache solrIncorrect Authorization in Apache Solr9.8 Critical
- apache fineractThe implementation of POST with the username and password in the URL parameters exposed the...7.5 High
- mirahezebots channelmgnt, sopel-channelmgnt +1 morePrivilege Escalation in Channelmgnt plug-in for Sopel7.7 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware 3d +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware 3d +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware 3d +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bec technologies multiple routers, netgear jnr3210 firmware, r6020 firmware +9 more +11 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...6.5 Medium
- microhard bullet-lte, microhardcorp bullet-lte firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- microhard bullet-lte, microhardcorp bullet-lte firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- linux kernel, canonical ubuntu linux +1 moreUnprivileged overlay + shiftfs read access5.1 Medium
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized...3.3 Low
- siemens dca vantage analyzer, dca vantage analyzer firmware +1 moreA vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by...6.8 Medium
- siemens dca vantage analyzer, dca vantage analyzer firmware +1 moreA vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by...6.8 Medium
crmshSUSESecurity update for crmshNo score- openrobotics ros comm ros communications packages, ros ros-comm +1 moreInteger overflow in ROS communications library7.3 High
- mariadb, debian linux, galeracluster galera cluster for mysql +1 more +3 moreImportant: mariadb:10.3 security, bug fix, and enhancement update9.0 Critical
- josdejong mathjsPrototype Pollution7.3 High
phpOSS-FuzzHeap-use-after-free in destroy_op_arrayNo scoreopenh264OSS-FuzzUse-of-uninitialized-value in WelsDec::GetColocatedMbNo score- Show moreLoading…