CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- matrix synapseCross-site scripting (XSS) vulnerability in the fallback authentication endpoint6.1 Medium
- apple ios, ipados, tvos +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and...5.5 Medium
- xwiki, xwiki xwiki-platform +1 moreRCE in XWiki8.5 High
- apple ios, ipados, iphone os +2 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium
- apple ios, ipados, iphone os +2 moreA lock screen issue allowed access to messages on a locked device. This issue was addressed with...2.4 Low
- apple ios, ipados, iphone os +2 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple safari, icloud, ipados +6 more +8 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ios, ipados, watchos +1 more +3 moreThis issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0,...6.8 Medium
- apple safari, debian linux, webkit webkitgtk\+ +2 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in Safari...8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ios, ipados, macos +3 more +5 moreAn issue existed in the handling of environment variables. This issue was addressed with improved...5.5 Medium
- apple ios, ipados, tvos +2 more +4 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...3.3 Low
- wire, wireapp wire-desktop +1 moreInsecure use of shell.openExternal in Wire8.0 High
- apple ios, ipados, iphone os +2 moreA denial of service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple ios, ipados, watchos +1 more +3 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple macos, tvos, watchos +1 more +3 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13...9.8 Critical
- apple ios, ipados, iphone os +2 moreThis issue was addressed with improved checks. This issue is fixed in iOS 13.6 and iPadOS 13.6. A...7.5 High
- apple icloud, icloud for windows, ios +8 more +10 moreA URL Unicode encoding issue was addressed with improved state management. This issue is fixed in...5.3 Medium
- apple ios, ipados, tvos +1 more +3 moreAn input validation issue existed in Bluetooth. This issue was addressed with improved input...7.5 High
- apple macos, mac os x +1 moreThis issue was addressed with improved data protection. This issue is fixed in macOS Catalina 10...5.5 Medium
- apple safariA logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.2. A...3.3 Low
- apple ios, ipados, safari +1 more +3 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and...7.5 High
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13...8.8 High
- apple ios, ipados, tvos +2 more +4 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13...5.9 Medium
- apple ios, ipados, tvos +2 more +4 moreA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in...7.8 High
- apple ios, ipados, safari +1 more +3 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and...7.5 High
- ibm resilient onprem, resilient security orchestration automation and response +1 moreIBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through...8.2 High
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic...5.9 Medium
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn issue existed in the handling of iMessage tapbacks. The issue was resolved with additional...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ios, ipados, macos +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple ios, ipados, macos +3 more +5 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS...8.8 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in...8.6 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10...9.8 Critical
- anuko time tracker, timetracker +1 moreCSV injection in Anuko Time Tracker8.7 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- apereo central authentication serviceImproper Authentication in Apereo CAS7.5 High
- testimonial rotator project rotatorTestimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin...5.4 Medium
- magento, adobe magento commerce +1 moreStored XSS in customer address upload feature6.1 Medium
- libass project libassIn libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer...8.8 High
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability...7.1 High
- aptean product configuratorAn issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL...9.8 Critical
- redhat jboss enterprise application platform, openshift application runtimes, single sign-on +2 moreA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...6.5 Medium
- olimpoks olimpokOLIMPOKS before 5.1.0 allows Auth/Admin ErrorMessage XSS.6.1 Medium
- gogsThe git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution. There can be a privilege escalation if access to this hook feature is granted to a user who does not h…7.2 High
- Show moreLoading…