CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- pulsesecure pulse secure desktop clientA vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to...7.8 High
- pulsesecure pulse secure desktop clientA vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to...7.8 High
- pulsesecure pulse secure desktop clientA vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to...7.8 High
- beef project beefData races in beef8.1 High
ca-certificatesUbuntuca-certificates updateNo score- sonicwall global vpn clientSonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL...8.6 High
- sonicwall global vpn clientSonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to...7.8 High
zeromqSUSESecurity update for zeromqNo score- mediawikiThe RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title...5.4 Medium
- car rental management system project rental management systemAn Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management...9.8 Critical
pcapplusplusOSS-FuzzBad-cast to pcpp::IDnsResource from invalid vptrNo scorelibassOSS-FuzzHeap-buffer-overflow in decode_charsNo score- dual dhcp dns server project dhcp dns serverAn issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in...7.8 High
- home dns server project dns serverAn issue was discovered in Home DNS Server 0.10. Due to insufficient access restrictions in the...7.8 High
- open dhcp server project dhcp serverIssues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0...7.8 High
- open tftp server project tftp serverIssues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1...7.8 High
- thembay greenmartThe search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.6.1 Medium
- apple ipados, macos, watchos +3 more +5 moreA logic issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15...5.3 Medium
- apple ios, watchos, iphone os +2 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ios, macos, watchos +2 more +4 moreA validation issue existed in Trust Anchor Management. This issue was addressed with improved...9.8 Critical
- apple music, music for android +1 moreThis issue was addressed with improved checks to prevent unauthorized actions. This issue is...5.5 Medium
- apple ipados, macos, iphone os +1 more +3 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- apple macos, ipados, iphone os +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7,...7.5 High
- apple ipados, safari, tvos +2 more +4 moreA memory corruption issue was addressed with improved validation. This issue is fixed in Safari...8.8 High
- apple ipados, tvos, ios and ipados +1 more +3 moreA trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS...5.5 Medium
- apple macos, mac os x +1 moreAn issue existed in the parsing of URLs. This issue was addressed with improved input validation....4.3 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA parsing issue in the handling of directory paths was addressed with improved path validation....7.5 High
- apple macos, icloud, ipados +5 more +7 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...9.8 Critical
- apple safariA custom URL scheme handling issue was addressed with improved input validation. This issue is...5.4 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4,...3.3 Low
- sebhildebrandt systeminformationCommand injection in systeminformation5.9 Medium
xml-cryptonpmxml-crypto's HMAC-SHA1 signatures can bypass validation via key confusionNo score- [unknown] python-cryptography, cryptography.io cryptography, oracle communications cloud native core network function cloud native environment +2 moreRSA decryption vulnerable to Bleichenbacher timing vulnerability5.9 Medium
- cogboard red discord bot, cog-creators red-discordbot +1 moreUnauthorized privilege escalation in Mod module7.7 High
- apple macos, mac os x +1 moreA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- ti z-stackThe Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does...8.2 High
- ti z-stackThe Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does...7.5 High
- ti z-stackThe Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does...7.5 High
- apple macos, mac os x +1 moreAn access issue was addressed with improved access restrictions. This issue is fixed in macOS...7.1 High
- apple macos, mac os x +1 moreAn issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting...7.5 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Catalina...5.3 Medium
- apple macos, mac os x +1 moreAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...6.3 Medium
- apple ios, macos, tvos +3 more +5 moreA user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in...7.5 High
- apple safariA logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL...5.3 Medium
- apple ipados, itunes, safari +4 more +6 moreAn information disclosure issue existed in the handling of the Storage Access API. This issue was...4.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by verifying host keys when connecting to a previously-known SSH server....6.5 Medium
- apple macos, mac os x +1 moreA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...5.5 Medium
- Show moreLoading…