CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- giteaArbitrary Code Execution in Gitea7.2 High
- bender com465dp firmware, com465id firmware, com465ip firmware +3 more +5 moreIn Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system....9.1 Critical
- clamxavAn issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed...7.8 High
- un4seen bassmidiThe BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of...9.8 Critical
- un4seen bassThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service...6.5 Medium
- un4seen bassThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds...6.5 Medium
- un4seen bassThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free...6.5 Medium
- openstack blazar-dashboardArbitrary Code Execution in blazar-dashboard9.9 Critical
- sagedpw sage dpwAn issue was discovered in Sage DPW 2020_06_x before 2020_06_002. The search field "Kurs suchen"...6.1 Medium
- sagedpw sage dpwAn issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users...6.1 Medium
- powerdns recursor, opensuse backports sle, leap +2 moreAn issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before...7.5 High
- marktextMutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this...8.3 High
- amazon firecrackerIn Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can...7.5 High
- vm-superio project vm-superioIn vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data...7.5 High
- phpredisadmin project phpredisadminphpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.6.1 Medium
- google tink, tink java +1 moreCiphertext integrity weakness in Tink5.3 Medium
openh264OSS-FuzzUse-of-uninitialized-value in UpdateDecStatNoFreezingInfoNo scorefluent-bitOSS-FuzzHeap-use-after-free in flb_parser_decoder_list_destroyNo scoreopenh264OSS-FuzzUNKNOWN READ in WelsDec::WelsMarkAsRefNo score- microsoft outlook, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Outlook Remote Code Execution Vulnerability7.5 High
firefoxUbuntufirefox regressionsNo score- atlassian jira, jira server +1 moreAffected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys...5.3 Medium
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 morePath Traversal in Eclipse Vert9.8 Critical
- otrsAgent names disclosed in chat feature4.3 Medium
- siemens siport mpA vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of...8.8 High
- siemens desigo insightA vulnerability has been identified in Desigo Insight (All versions). Some error messages in the...4.3 Medium
- siemens desigo insightA vulnerability has been identified in Desigo Insight (All versions). The device does not...5.4 Medium
- siemens desigo insightA vulnerability has been identified in Desigo Insight (All versions). The web service does not...4.3 Medium
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetwave 2212g firmware +29 more +31 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products9.8 Critical
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +28 more +30 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products7.2 High
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +23 more +25 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products8.8 High
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet4510 firmware +26 more +28 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products9.8 Critical
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, pepperl-fuchs es7506 firmware +13 more +15 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products9.8 Critical
- qualcomm qcmapThe QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October...6.7 Medium
- qualcomm mobile access pointThe QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in...7.5 High
- b&r automation runtimeAutomation Runtime TFTP Service DoS Vulnerability5.8 Medium
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Log Information Disclosure Vulnerability4.3 Medium
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Denial of Service Vulnerability6.5 Medium
- libarchiveHeap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3...6.5 Medium
- b&r sitemanagerSiteManager Denial of Service via Local File Inclusion Vulnerability7.7 High
- b&r sitemanagerSiteManager Local File Inclusion Vulnerability7.7 High
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Audit Message Spoofing Vulnerability6.5 Medium
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Information Disclosure Vulnerability6.5 Medium
- f2fs-tools project f2fs-toolsAn exploitable information disclosure vulnerability exists in the init_node_manager functionality...4.4 Medium
- f2fs-tools project f2fs-toolsAn exploitable code execution vulnerability exists in the multiple devices functionality of F2fs...8.2 High
- f2fs-tools project f2fs-toolsAn exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality...4.4 Medium
- f2fs-tools project f2fs-toolsAn exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of...8.2 High
- f2fs-tools project f2fs-toolsAn exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs...4.4 Medium
crmshSUSESecurity update for crmshNo score- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an...7.3 High
- Show moreLoading…