CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- oracle sql developerVulnerability in the SQL Developer Install component of Oracle Database Server. Supported...2.8 Low
- oracle database vault, oracle corporation database - enterprise edition +1 moreVulnerability in the Database Vault component of Oracle Database Server. Supported versions that...3.8 Low
- oracle scheduler, oracle corporation database - enterprise edition +1 moreVulnerability in the Scheduler component of Oracle Database Server. Supported versions that are...8.8 High
- oracle textVulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are...8.1 High
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...3.1 Low
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...3.1 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....4.9 Medium
- acronis true imageAcronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory....7.8 High
- acronis true image 2021, true image +1 moreAcronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a...7.8 High
- acronis cyber backup, cyber protect +1 moreAcronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an...7.8 High
- bigbluebuttonBigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF...6.5 Medium
- lightning network daemon project network daemonPrior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-c…8.2 High
- lightning network daemon project network daemonPrior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any…5.3 Medium
- ghisler total commanderAn issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions...7.3 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 81 and...9.8 Critical
- adobe illustratorAdobe Illustrator Memory Corruption Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Memory Corruption Vulnerability7.8 High
- adobe illustratorAdobe Illustrator PDF File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- adobe illustratorAdobe Illustrator PDF File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Memory Corruption Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Memory Corruption Vulnerability7.8 High
- adobe illustratorAdobe Illustrator PDF File Parsing Out-Of-Bounds Write Vulnerability7.8 High
- adobe marketo, marketo sales insight +1 moreBlind stored XSS in Marketo Sales insight plugin for SalesForce7.5 High
- advantech r-seenetThe R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote...7.5 High
- nagios xiImproper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a...7.2 High
- nagios xiCross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive...6.5 Medium
- nagios xiImproper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote,...7.2 High
- tibco foresight archive and retrieval system, foresight operational monitor, foresight transaction insight +3 more +5 moreTIBCO Foresight SQL Injection7.6 High
- chocolatey boxstarterPrivilege Escalation in Boxstarter8.0 High
- sparksolutions spreeExpired token reuse in Spree7.4 High
- netwrix account lockout examinerNetwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2...7.5 High
- mind imind serverInterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self...7.5 High
- domainmodDomainMOD before 4.14.0 uses MD5 without a salt for password storage.7.5 High
- raise it solutions rits browserRaise IT Solutions RITS Browser Address Bar Spooofing4.3 Medium
- boltbrowser bolt browserDanyil Vasilenko Bolt Browser Address Bar Spooofing4.3 Medium
- yandex browserYandex Browser Address Bar Spooofing4.3 Medium
- ucweb uc browserUCWeb UC Browser Address Bar Spooofing4.3 Medium
- ucweb uc browserUCWeb UC Browser Address Bar Spooofing4.3 Medium
- vmware esxi, fusion, workstation +2 more +4 moreIn VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation ...5.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...7.4 High
- broadcom vmware nsx-t data center, vmware cloud foundation +1 moreVMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that...5.9 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401...9.8 Critical
- vmware esxi, fusion, workstation +3 more +5 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...7.7 High
- vmware esxi, fusion, workstation +2 more +4 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...5.8 Medium
- general electric reason s20 ethernet switch, ge s2020 firmware, s2024 firmware +2 moreGE Reason S20 Ethernet Switch6.1 Medium
- ibm spectrum scale, elastic storage server +1 moreIBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM...6.2 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization...4.3 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File...5.4 Medium
- Show moreLoading…