CVEs published in October 2020
1,695 vulnerabilities, 205 critical, 15 exploited.
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with...8.8 High
- eyesofnetworkAn issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is...9.8 Critical
- clickstudios passwordstateAn issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system...6.8 Medium
- fast-report fastreportMissing Authorization in FastReport9.8 Critical
- smartstore smartstorenetAn issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttribute decoration in certain ModelBase.CustomProperties situations.8.8 High
- zohocorp manageengine applications managerSQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to...9.8 Critical
- westerndigital my cloud firmwareAn issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow...9.8 Critical
- commvault commcellIn CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29,...7.5 High
- ibm resilient onprem, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server...4.3 Medium
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm security directory serverIBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or...3.7 Low
- ibm security directory serverIBM Security Directory Server 6.4.0 generates an error message that includes sensitive...5.3 Medium
- f5 big-ip ltm, big-ip local traffic manager +1 moreOn BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests...6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...7.5 High
- f5 big-ip asm, big-ip application security manager +1 moreOn BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP...4.8 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreOn BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1...5.9 Medium
- hrsaleHrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.5.3 Medium
- rapid7 metasploitClient-Side Command Injection in Rapid7 Metasploit7.0 High
- broadleafcommerce broadleaf commerceBroadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post...6.1 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels...6.5 Medium
- wso2 enterprise integratorWSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS)...5.4 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation...6.5 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...8.3 High
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...5.8 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...8.3 High
- synology router manager, router manager (srm) +1 moreSynology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set...7.1 High
- synology router manager, router manager (srm) +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager ...6.5 Medium
- synology router manager, router manager (srm) +1 moreImproper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows...6.5 Medium
- synology router manager, router manager (srm) +1 moreImproper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081...9.8 Critical
- synology router manager, router manager (srm), diskstation manager +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4...8.3 High
- synology router manager, router manager (srm) +1 moreSynology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session...5.8 Medium
- synology router manager, router manager (srm) +1 moreImproper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM)...8.3 High
- chartjs chart.jsPrototype Pollution7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC...6.7 Medium
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a...9.8 Critical
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site...8.8 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a...4.9 Medium
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC...9.8 Critical
minizOSS-FuzzUse-of-uninitialized-value in tinfl_decompressNo scoreqemuOSS-FuzzHeap-buffer-overflow in lduw_he_pNo score- Show moreLoading…