CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP...6.1 Medium
- mintegral mintegraladsdkInformation Exposure4.7 Medium
stream-ciphercrates.iocrate has been renamed to `cipher`No scoreblock-ciphercrates.iocrate has been renamed to `cipher`No score- mcafee mvision endpoint detection and response, mcafee,llc mcafee mvision endpoint detection and response +1 moreMcAfee MVEDR - Improperly implemented security check6.0 Medium
- mcafee active response, mcafee,llc mcafee active response +1 moreMcAfee MAR - Improperly implemented security check6.0 Medium
- mcafee application and change control, mcafee,llc mcafee application and change control (macc) +1 moreImproper privilege assignment vulnerability in the installer component of MACC7.7 High
bcm43xx-firmwareSUSESecurity update for bcm43xx-firmwareNo scorecrmshSUSESecurity update for crmshNo score- veritas aptareVeritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This...9.8 Critical
- veritas aptareVeritas APTARE versions prior to 10.5 included code that bypassed the normal login process when...8.1 High
- bluez, debian linux, opensuse leap +2 moreIn BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared...8.6 High
- onwebchat live chat - live supportCross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and...8.8 High
- sap netweaver application server javaSAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an...4.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received...4.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap (powl test application) +1 moreUser enumeration vulnerability can be exploited to get a list of user accounts and personal user...4.3 Medium
- sap introscope enterprise manager, sap se solution manager (ca introscope enterprise manager) and sap focused run (ca introscope enterprise manager) +1 moreSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10...10.0 Critical
- sap business planning and consolidationSAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200,...5.4 Medium
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that...4.6 Medium
- sap netweaver application server javaSAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50...6.1 Medium
- sap commerce cloudSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,...5.4 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (fiori framework page) +1 moreSAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not...6.1 Medium
fluent-bitOSS-FuzzHeap-buffer-overflow in _conv_numNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_log_printNo scorewolfsslOSS-FuzzHeap-buffer-overflow in wolfSSH_acceptNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::Update8x8RefIdxNo score- containerd, canonical ubuntu linux, debian linux +2 morecontainerd can be coerced into leaking credentials during image pull6.1 Medium
- lenovo thinkpad stack wireless router firmwareAn authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router...8.8 High
- lenovo cloud networking operating system (cnos), cloud networking operating system +1 moreAn internal security review has identified an unauthenticated remote code execution vulnerability...9.8 Critical
- lenovo hardware scan, vantage hardwarescan plugin +1 moreA DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo...7.3 High
- lenovo diagnosticsA DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that...7.8 High
- ibm system x, lenovo bladecenter hs23 firmware, bladecenter hs23e firmware +16 more +18 moreA potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers...6.4 Medium
- rapid7 nexposeSQL Injection in Rapid7 Nexpose6.5 Medium
- hpcng singularity, opensuse backports sle, leap +2 morePath traversal and files overwrite with unsquashfs8.2 High
- openenclaveSocket syscalls can leak enclave memory contents in Open Enclave6.8 Medium
- mcafee epolicy orchistrator (epo), epolicy orchestrator +1 moreePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability4.6 Medium
- mcafee epolicy orchistrator (epo), epolicy orchestrator +1 moreePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability4.6 Medium
- cisco duo authentication for windows logon and rdpDuo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability6.6 Medium
- grocyStored XSS in Grocy7.3 High
- cisco duo network gateway (dng), duo network gateway +1 moreDuo Network Gateway (DNG) Information Disclosure Vulnerability7.1 High
- ibm security access manager applianceIBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could...6.3 Medium
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs...4.4 Medium
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension...6.0 Medium
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension...5.4 Medium
drupal/oauth_server_ssoPackagistThis module enables you login into any OAuth 2.0 compliant application using Drupal credentials. The 8.x branch of the module is vulnerable to SQL injection.No scorecrmshSUSESecurity update for crmshNo score- Show moreLoading…