CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +22 more +24 moreWindows Image Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +25 more +27 moreWindows Hyper-V Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +13 more +15 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows KernelStream Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Network Connections Service Elevation of Privilege Vulnerability7.8 High
- microsoft powershellget, powershellget 2.2.5 +1 morePowerShellGet Module WDAC Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1803 +11 more +13 moreWindows Storage VSP Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +7 more +9 moreWindows Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows Application Compatibility Client Library Elevation of Privilege Vulnerability7.1 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 r2 service pack 1 +2 more +4 moreWindows Remote Desktop Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows Storage Services Elevation of Privilege Vulnerability7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and NFX Series: Insufficient Web API private key protection6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.6.5 Medium
- juniper mist cloud uiJuniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.7.2 High
- juniper mist cloud uiJuniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.7.2 High
- juniper mist cloud uiJuniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.8.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX350: Password hashes stored in world-readable format6.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.8.3 High
- juniper junos os evolvedJunos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection6.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Buffer overflow vulnerability in device control daemon7.8 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: RPD crash due to BGP session flapping.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd process crash when forwarding a malformed DHCP packet.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.8.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.8.8 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf...5.5 Medium
- overwolfIn the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is...8.1 High
- actions-micro ezcast pro ii firmwareIn EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash...6.5 Medium
- npmjs npm-user-validateRegular Expression Denial of Service (ReDoS)7.5 High
- dell emc networker, networker +1 moreDell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability....6.8 Medium
- dell emc networker, networker +1 moreDell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment...6.8 Medium
org.http4s:http4s-async-http-client_2.12Maven,org.http4s:http4s-async-http-client_2.13Maven +1 moreMemory exhaustion in http4s-async-http-client with large or malicious compressed responsesNo score- apple ios, ipados, xcode +1 more +3 moreThis issue was addressed by encrypting communications over the network to devices running iOS 14,...7.8 High
- apple safari, icloud, ipados +5 more +7 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...8.8 High
- Show moreLoading…