CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability7.4 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 moreCisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense, adaptive security appliance software +1 more +3 moreCisco Firepower 1000 Series Bleichenbacher Attack Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Hidden Commands Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability8.6 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability8.1 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability8.6 High
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability6.7 Medium
- cisco adaptive security appliance (asa) software, firepower extensible operating system +1 moreCisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability8.8 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower extensible operating system +1 more +3 moreCisco FXOS Software Command Injection Vulnerability6.7 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities6.7 Medium
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability6.7 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability8.2 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability8.6 High
- cisco firepower management center, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability8.1 High
- cisco firepower management center, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability8.1 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities4.8 Medium
- snort, cisco firepower threat defense software, secure firewall threat defense +2 moreMultiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability5.8 Medium
- apache hadoopAuthentication bypass in Apache Hadoop8.8 High
- auth0 omniauth-auth0Regression in JWT Signature Validation7.4 High
- mit scratch-svg-rendererCross-site Scripting (XSS)9.6 Critical
- mra13 simple download monitorSQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers...8.8 High
- mra13 simple download monitorCross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote...6.1 Medium
- bigbluebuttonIn BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already...3.5 Low
- bigbluebuttonBigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document...7.5 High
- bigbluebuttonBigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for...6.5 Medium
- bigbluebuttonBigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and...9.8 Critical
- bigbluebuttonIn BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the...6.5 Medium
- bigbluebuttonBigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording...5.3 Medium
- bigbluebuttonBigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an...7.3 High
- bigbluebuttonThe installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the...8.4 High
- bigbluebuttonGreenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an...4.3 Medium
- bigbluebuttonThe installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network...7.5 High
- bigbluebuttonIn BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a...6.1 Medium
- bigbluebuttonBigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in...5.3 Medium
- bigbluebuttonBigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in...9.8 Critical
- fortinet fortios, fortiproxy, fortigate and fortiproxy +2 moreA cleartext storage of sensitive information vulnerability in FortiOS command line interface in...5.3 Medium
- oracle database, oracle corporation database - enterprise edition +1 moreVulnerability in the RDBMS Security component of Oracle Database Server. The supported version...4.9 Medium
- oracle application express, oracle corporation application express (apex) +1 moreVulnerability in the Oracle Application Express Group Calendar component of Oracle Database...5.4 Medium
- Show moreLoading…