CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- ibm spectrum scaleIBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local...4.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL...6.3 Medium
- sap netweaver design time repository, sap se netweaver (di design time repository) +1 moreSAP NetWeaver Design Time Repository (DTR), versions - 7.11, 7.30, 7.31, 7.40, 7.50, does not...4.8 Medium
- sap netweaver composite application frameworkThere is a reflected cross site scripting vulnerability in SAP NetWeaver Composite Application...8.2 High
- sap banking servicesSAP Banking Services version 500, use an incorrect authorization object in some of its reports....4.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web services) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430,...5.3 Medium
- sap focused run, solution manager, sap se ca introscope enterprise manager (affected products: sap solution manager and sap focused run) +2 moreSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10...7.5 High
- sap se netweaver (compare systems), sap netweaver compare systems +1 moreSAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate...7.6 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file...5.7 Medium
- osm-static-maps project osm-static-mapsServer-side Request Forgery (SSRF)7.6 High
- ts.ed project ts.edPrototype Pollution5.6 Medium
- lightning-viz lightningCross-site Scripting (XSS)6.3 Medium
- onethird, spiqe software onethird cms +1 moreLocal file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote...9.8 Critical
- mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 moreA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...7.5 High
- freetype, google chrome, debian linux +4 more +6 moreHeap buffer overflow in CefSharp9.6 Critical
shopware/corePackagist,shopware/platformPackagist +1 moreDenial of Service via Cache FloodingNo scoreshopware/corePackagist,shopware/platformPackagist +1 moreAuthenticated XML External Entity Processing5.6 Medium- veyonUnquoted service path vulnerability on Veyon8.0 High
- mariocasciaro object-pathPrototype pollution in object-path7.7 High
- rockwellautomation flex i\/o 1794-aent, talos allen bradley +1 moreAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment...7.5 High
- rockwellautomation flex i\/o 1794-aentAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment...7.5 High
- infinispan infinispan-server-runtime, red hat infinispan +1 moreA flaw was found in Infinispan version 10, where it permits local access to controls via both...6.1 Medium
- syliusEmail verification bypass in Sylius4.3 Medium
- apache kylinAuthentication bypass in Apache Kylin5.3 Medium
- orchid platformXSS in platform8.0 High
- waysact webpack-subresource-integrityInvalid integrity hashes in webpack-subresource-integrity3.7 Low
- huawei e6878-370 firmware, e6878-870 firmware +1 moreE6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1...4.5 Medium
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability...8.0 High
- huawei mate 30 firmware, p30 firmware +1 moreHUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than...7.8 High
- yubico yubihsm-shell, fedoraproject fedora +1 moreAn issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The...7.5 High
- yubico yubihsm-shell, fedoraproject fedora +1 moreAn issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The...7.5 High
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection...4.6 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation...7.8 High
- blingerBlinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary...6.1 Medium
- sprecher-automation sprecon-eSprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering...6.7 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.7.3 High
- free freebox server, freebox v5 firmware +1 moreA DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.6.5 Medium
- gopro gpmf-parserGoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing...7.5 High
- gopro gpmf-parserGoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing...7.5 High
- gopro gpmf-parserGoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing...9.1 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectrules expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA perfaddormoddevicemonitor expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ictexpertcsvdownload expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA devicethresholdconfig expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA devsoftsel expression language injection remote code execution vulnerability was discovered in...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA deviceselect expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultflasheventselectfact expression language injectionremote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA userselectpagingcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA reportpage index expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA powershellconfigcontent expression language injection remote code execution vulnerability was...8.8 High
- Show moreLoading…