CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- mediawiki skin\The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not...6.1 Medium
- mediawikiThe FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user...4.3 Medium
openh264OSS-FuzzUNKNOWN READ in WelsDec::WelsMarkAsRefNo score- python, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 moreIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Critical
- imagemagick, debian linux, opensuse leap +2 moreImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which...3.3 Low
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed...9.8 Critical
- mozilla firefoxWhen a link to an external protocol was clicked, a prompt was presented that allowed the user to...6.5 Medium
- mozilla firefoxWhen multiple WASM threads had a reference to a module, and were looking up exported functions,...7.5 High
- mozilla firefoxIf a valid external protocol handler was referenced in an image tag, the resulting broken image...5.3 Medium
- arista eosArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24...7.5 High
- wso2 api managerWSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin...6.1 Medium
- adobe indesignAdobe InDesign 15.1.2 NULL Pointer Dereference Bug5.5 Medium
- adobe media encoderUncontrolled Search Path in Adobe Media Encoder for Windows7.0 High
- adobe premiere, premiere pro +1 moreUncontrolled Search Path in Adobe Premiere Pro for Windows7.0 High
- adobe photoshopUncontrolled Search Path Element in Adobe Photoshop for Windows7.0 High
- google tensorflowUndefined behavior in Tensorflow3.7 Low
- google tensorflowSegfault in Tensorflow5.9 Medium
- adobe after effectsUncontrolled Search Path Element in Adobe After Effects for Windows7.0 High
- adobe after effectsAdobe After Effects Out-of-Bounds Read Vulnerability7.8 High
- loginizerThe Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS),...9.8 Critical
- adobe dreamweaverPrivilege escalation vulnerability in Dreamweaver version 20.27.5 High
- openmage magento, magento-lts +1 moreRCE in Magento8.0 High
- adobe animateOut-of-bounds read vulnerability in Adobe Animate 20.57.8 High
- adobe animateDouble-free vulnerability in Adobe Animate 20.57.8 High
- adobe animateOut-of-bounds read vulnerability in Adobe Animate 20.57.8 High
- adobe animateStack overflow vulnerability in Adobe Animate 20.57.8 High
- adobe creative cloud, creative cloud (desktop component) +1 moreUncontrolled Search Path in Creative Cloud Desktop Application7.0 High
- cminds cm download managerThe cm-download-manager plugin before 2.8.0 for WordPress allows XSS.6.1 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability6.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Denial of Service Vulnerability5.3 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Open Redirect Vulnerability4.7 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability4.7 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower 4110 ICMP Flood Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability8.6 High
- Show moreLoading…