CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- huawei manageone ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0... 7.2 High
- huawei fusioncompute Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An... 7.2 High
- hcl software inotes, hcltech hcl inotes +1 more HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an... 5.9 Medium
- hcl domino, hcltech hcl domino +1 more HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An... 5.3 Medium
- atlassian automation for jira Affected versions of Automation for Jira - Server allowed remote attackers to read and render... 5.4 Medium
- hcl domino, hcltech hcl domino +1 more HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker... 6.5 Medium
- outsystems An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An... 7.2 High
- mitsubishielectric r00cpu firmware, r01cpu firmware, r02cpu firmware +16 more +18 more Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the... 7.5 High
- canon ir2202n firmware, ir2204f firmware, ir2204n firmware +25 more +27 more An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter... 7.5 High
- tesla model x firmware Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without... 6.5 Medium
- tesla model x firmware Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the... 4.6 Medium
- tesla model x firmware Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt... 4.6 Medium
- audacityteam audacity, fedoraproject fedora +1 more Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After... 3.3 Low
- quickheal total security Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access... 6.7 Medium
- quickheal total security Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text. 5.9 Medium
- quickheal total security Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify... 4.4 Medium
- honor pcmanager A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50... 7.8 High
- myeventon eventon The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. 6.1 Medium
- sap adaptive server enterprise In certain situations, an attacker with regular user credentials and local access to an ASE... 2.6 Low
- pbootcms Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a... 6.5 Medium
- lock password manager safe app project password manager safe app The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a *#06#* backdoor password. An... 4.6 Medium
- netartmedia news lister In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can... 4.8 Medium
- zeroshell Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet... 9.8 Critical
- ucms project ucms File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this... 9.8 Critical
- readymedia project readymedia, debian linux +1 more ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious... 9.8 Critical
- advsys pngout An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters... 5.5 Medium
- ibm business automation workflow IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files... 5.1 Medium
- ibm cloud pak for security IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could... 5.3 Medium
- ibm cloud pak for security IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote... 6.5 Medium
- ibm cloud pak for security IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal... 5.0 Medium
- ibm cloud pak for security IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive... 4.0 Medium
- ibm cloud pak for security IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms... 3.7 Low
- canto The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an... 5.3 Medium
- canto The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an... 5.3 Medium
- canto The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an... 5.3 Medium
-
mysql-8.0Ubuntu mysql-8.0 vulnerabilities No score - synology safeaccess, safe access +1 more SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote... 9.6 Critical
- synology safeaccess, safe access +1 more Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234... 8.4 High
- fujitsu eternus storage dx200 s4 firmware An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After... 9.8 Critical
-
libavcOSS-Fuzz Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice No score - genivi diagnostic log and trace, debian linux +1 more A buffer overflow in the dlt_filter_load function in dlt_common.c in dlt-daemon 2.8.5 (GENIVI... 7.8 High
- debian linux, linux kernel, netapp aff a250 firmware +9 more +11 more CVE-2020-27815 affecting package kernel for versions less than 5.15.135.1-2 7.8 High
- uclouvain openjpeg, debian linux +1 more A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An... 7.8 High
- containerd, debian linux, fedoraproject fedora +2 more containerd-shim API Exposed to Host Network Containers 5.2 Medium
- syncpool project syncpool Duplicate Advisory: Data races on syncpool 8.1 High
- magnetic project magnetic Data races in magnetic 5.5 Medium
- hakobaito branca Unexpected panic when decoding tokens in branca 5.5 Medium
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 more An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1... 8.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 more An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1... 9.8 Critical
- vsolcn v1600d firmware An issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is... 9.8 Critical
- Show olderLoading…