CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, ipados, macos +3 more +5 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn integer overflow was addressed through improved input validation. This issue is fixed in iOS...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ios, ipados, macos +4 more +6 moreA certificate validation issue existed when processing administrator added certificates. This...9.1 Critical
- apple ios, ipados, macos +4 more +6 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.5 High
- apple ios, ipados, macos +3 more +5 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS...7.8 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.5 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- apple ios, macos, tvos +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...5.5 Medium
- apple ios, macos, tvos +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...5.3 Medium
- apple macos, mac os x +1 moreA race condition was addressed with improved state handling. This issue is fixed in macOS...7.0 High
- apple macos, mac os x +1 moreThis issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A...7.1 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10...6.8 Medium
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple ios, macos, tvos +4 more +6 moreAn access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13...5.5 Medium
- apple macos, mac os x +1 moreA path handling issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- tikitiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid...9.8 Critical
- octopus deployAn issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint...7.5 High
- elastic elasticsearchPrivilege Context Switching Error in Elasticsearch3.1 Low
- hashicorp nomadUse After Free in HashiCorp Nomad9.1 Critical
- dedecmsA Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that...5.4 Medium
- atomx atomxcmsAtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php5.3 Medium
- atomx atomxcms 2AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php8.1 High
- fs s3900 24t4s firmwareAn issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an...8.8 High
- biscom secure file transferBiscom Secure File Transfer (SFT) before 5.1.1082 and 6.x before 6.0.1011 allows user credential...6.5 Medium
- bigbluebutton greenlightA cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins...6.1 Medium
- fastd project fastd, debian linux, fedoraproject fedora +2 morereceive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets...7.5 High
- rust-lang future-utilsMutexGuard::map can cause a data race in safe code4.7 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75...6.3 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed...7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75...7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote...8.8 High
- Show moreLoading…