CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- apple macos, mac os x +1 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreThis issue was addressed by removing additional entitlements. This issue is fixed in macOS Mojave...5.5 Medium
- apple macos, mac os x +1 moreThis issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved...7.8 High
- apple ios, macos, tvos +3 more +5 moreA configuration issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
bitlyshortenerPyPIUpdate bitlyshortener to >=0.5.0 to prevent generating some invalid short URLsNo score- apple ios, itunes, safari +3 more +5 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2,...6.5 Medium
- apple macos, watchos, iphone os +1 more +3 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...5.5 Medium
- apple ios, iphone os +1 moreA lock screen issue allowed access to the share function on a locked device. This issue was...7.1 High
- apple ios, tvos, iphone os +2 moreA resource exhaustion issue was addressed with improved input validation. This issue is fixed in...5.5 Medium
- apple macos, watchos, iphone os +1 more +3 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...5.5 Medium
- apple ios, iphone os +1 moreThis issue was addressed with a new entitlement. This issue is fixed in iOS 12.1. A local user...5.5 Medium
- apple macos, mac os x +1 moreThis issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This...9.8 Critical
- wire, wire secure messenger, - audio\, video\, and signaling +2 moreWire before 2020-10-16 allows remote attackers to cause a denial of service (application crash)...9.8 Critical
- dat.gui project dat.guiRegular Expression Denial of Service (ReDoS)7.5 High
- micro focus operation bridge (containerized), operation bridge manager, microfocus operations bridge +1 more +3 moreCode execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.7.8 High
- micro focus application performance management, operation bridge (containerized), operation bridge manager +2 more +4 moreArbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.9.8 Critical
- victor cms project cmsA SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category...7.5 High
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreCheck Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges...7.8 High
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreCheck Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary...5.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows...7.5 High
- 1password scim, command line interface +1 moreAn issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in...9.8 Critical
- iobit malware fighterAn issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is...7.8 High
- trim project trimRegular Expression Denial of Service (ReDoS)7.5 High
- konzept-ix publixonekonzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by...9.8 Critical
- konzept-ix publixoneA RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015...9.8 Critical
- konzept-ix publixoneMultiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow...6.1 Medium
- konzept-ix publixoneA hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020...6.5 Medium
- konzept-ix publixonekonzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the...7.5 High
- pulsesecure pulse secure desktopPulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users'...3.8 Low
- ivanti connect secure, policy secure, pulsesecure pulse connect secure +1 more +3 moreAn XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse...7.2 High
- openrc project openrccheckpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files...5.5 Medium
- clusterlabs pacemaker, debian linux +1 moreAn ACL bypass flaw was found in pacemaker before 1.1.24-rc1 and 2.0.5-rc2. An attacker having a...7.2 High
- blueman-project blueman, debian linux, fedoraproject fedora +2 moreLocal privilege escalation Blueman7.1 High
- pam tacplus project tacpluslibtac in pam_tacplus through 1.5.1 lacks a check for a failure of RAND_bytes()/RAND_pseudo_bytes(). This could lead to use of a non-random/predictable session_id.9.8 Critical
- facebook hermesOut-of-bounds Read in Facebook Hermes7.5 High
- commscope ruckus vriotRuckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An...9.8 Critical
- commscope ruckus vriotRuckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can...8.8 High
- fireeye email malware protection systemeMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL...6.5 Medium
- requarks wiki.jsStored XSS via search result in Wiki.js5.8 Medium
- ericcornelissen git-tag-annotation-actionShell-injection in git-tag-annotation GitHub action8.7 High
- d0c-s4vage lookatmeShell Command Execution in lookatme9.3 Critical
- openr opentmpfilesopentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d...5.5 Medium
- motion project motionA Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request.7.5 High
- octopus deployIn Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a...6.1 Medium
- sebhildebrandt systeminformationCommand Injection8.8 High
- kde partition managerAn issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand...7.8 High
- zte evdcA ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of...5.4 Medium
- antsword project antswordA cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.9.6 Critical
- arubanetworks airwave glassA remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave...9.8 Critical
- arubanetworks airwave glassA remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave...5.8 Medium
- Show moreLoading…