CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- arubanetworks airwave glassA remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s...8.8 High
- arubanetworks airwave glassA remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s):...9.8 Critical
- arubanetworks airwave glassA remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software...7.2 High
- arubanetworks airwave glassA remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software...7.2 High
- arista eosArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24...7.5 High
- hp storeserv management console, hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media +1 moreSSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC...9.8 Critical
- hp bluedata epic, ezmeral container platform +1 moreThe HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an...6.5 Medium
- arista cloudvision exchangeArista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before...7.5 High
- antsword project antswordAntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion....6.1 Medium
- chaijis pathvalPrototype Pollution6.0 Medium
uwebsocketsOSS-FuzzUse-of-uninitialized-value in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LLNo scoreopenh264OSS-FuzzUse-of-uninitialized-value in WelsCommon::CMemoryAlign::~CMemoryAlignNo scoreclaws-mailMageiaUpdated claws-mail packages fix a security vulnerabilityNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_utils_time_to_secondsNo score- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote...8.8 High
- illumos, joyent smartos, omniosce omnios +2 moreAn issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by,...9.8 Critical
- yourlsYOURLS Stored Cross Site Scripting (XSS)5.4 Medium
- fruitywifi project fruitywifiFruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows...7.8 High
- fruitywifi project fruitywifiA Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to...4.3 Medium
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the...7.8 High
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its...7.8 High
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA...7.8 High
- ucms project ucmsAn arbitrary command execution vulnerability exists in the fopen() function of file writes of...9.8 Critical
- crmebA SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely...9.8 Critical
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure...6.5 Medium
- vmware horizonVMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS)...5.4 Medium
- belkin linksys wrt 160nl firmware** UNSUPPORTED WHEN ASSIGNED ** Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a...8.8 High
- verifone p200 firmware, p400 firmware, vx 805 firmware +1 more +3 moreVerifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI...6.8 Medium
- avm fritz\!box 7490 firmwareFRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.7.8 High
- open-xchange appsuiteOX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.4.8 Medium
- open-xchange appsuiteOX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address...4.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.5.0 Medium
- cryptopro cspCryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local...7.8 High
- cryptopro cspCryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the...5.5 Medium
- verifone verix osVerifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode ...6.6 Medium
- verifone verix osVerifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the...7.8 High
- verifone mx900 firmwareVerifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with...6.7 Medium
- verifone mx900 firmwareVerifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command...7.8 High
- verifone mx900 firmwareVerifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned...5.5 Medium
- verifone verix osVerifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin...7.8 High
- verifone mx900 firmwareVerifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC...7.0 High
- comtrend ar-5387un firmwareA cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02...5.4 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.0 High
openh264OSS-FuzzHeap-buffer-overflow in ExpandPictureChroma_cNo scorewolfsslOSS-FuzzHeap-buffer-overflow in RsaPad_PSSNo score- parse-community parse-serverImproper session expiration in Parse Server4.3 Medium
- micro focus application performance management, data center automation, hybrid cloud management +7 more +9 moreArbitrary code execution vulnerability on multiple Micro Focus products8.8 High
- Show moreLoading…