CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA accessmgrservlet classname deserialization of untrusted data remote code execution...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA remote accessmgrservlet classname input validation code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE...9.8 Critical
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow...7.5 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow...7.5 High
- solarwinds n-centralSolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly....4.7 Medium
- solarwinds n-centralSolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or...8.8 High
- rconfigrConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a...8.8 High
- mintegral mintegraladsdkMalicious Package7.1 High
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_cNo scorekimageformatsOSS-FuzzBad-cast to QPaintDevice from invalid vptrNo score- sage easypayMultiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow...5.4 Medium
openh264OSS-FuzzUNKNOWN READ in decoder_fuzzerNo scoreopenh264OSS-FuzzUNKNOWN READ in WelsCommon::WelsMallocNo scorewolfsslOSS-FuzzHeap-buffer-overflow in clean_pathNo scoremrubyOSS-FuzzUNKNOWN READ in presym_sym2nameNo score- eclecticiq opentaxii, libtaxii project libtaxii +1 morelibtaxii Server-Side Request Forgery vulnerability9.8 Critical
crmshopenSUSESecurity update for crmshNo scorecrmshopenSUSESecurity update for crmshNo scorelibcoapOSS-FuzzHeap-buffer-overflow in coap_opt_lengthNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::UpdateP16x16RefIdxNo score- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1803 +12 more +14 moreWindows Hyper-V Denial of Service Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +11 more +13 moreMicrosoft Graphics Components Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for x64-based systems +9 more +11 moreWindows Hyper-V Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1709, windows 10 version 1803, windows 10 version 1809 +10 more +12 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeVisual Studio JSON Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +7 more +9 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability7.8 High
- microsoft 3d viewerBase3D Remote Code Execution Vulnerability7.8 High
- microsoft network watcher agent virtual machine extension for linux, network watcher agent +1 moreNetwork Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows iSCSI Target Service Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0 +1 moreMicrosoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability5.4 Medium
- microsoft visual studio code, python extension for visual studio code +1 moreVisual Studio Code Python Extension Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +21 more +23 moreWindows Backup Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +21 more +23 moreWindows Backup Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +21 more +23 moreWindows Backup Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +21 more +23 moreWindows Backup Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +21 more +23 moreWindows Backup Service Elevation of Privilege Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Information Disclosure Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +9 more +11 moreWindows Camera Codec Pack Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +9 more +11 moreWindows Camera Codec Pack Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +1 more +3 moreMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 8.2, dynamics 365 (on-premises) version 9.0 +2 moreMicrosoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability5.4 Medium
- microsoft office, 365 apps, 365 apps for enterprise +2 more +4 moreMicrosoft Office Click-to-Run Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2010 service pack 2 +4 more +6 moreMicrosoft SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Remote Code Execution Vulnerability8.6 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Remote Code Execution Vulnerability8.6 High
- microsoft sharepoint server, sharepoint server 2019 +1 moreMicrosoft SharePoint Information Disclosure Vulnerability5.0 Medium
- Show moreLoading…