CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- hcl software digital experience, hcltech hcl digital experience +1 moreHCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One...6.1 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information...3.2 Low
- hcl notesIn HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to...6.8 Medium
- hcl notesHCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible...6.1 Medium
- mind imind serverCSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.8.8 High
- mind imind serverStored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's...7.8 High
- marmindAn Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0...4.3 Medium
- robware rvtoolsRVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in...7.5 High
- web-audimex audimexeeSQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an...8.8 High
- git large file storage project large file storageGit LFS can execute a Git binary from the current directory9.8 Critical
- web-audimex audimexeeAudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended...5.4 Medium
- immutaImmuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout.8.8 High
- immutaImmuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account...7.5 High
- immutaImmuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing...6.1 Medium
- immutaImmuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges...9.0 Critical
- hindotech hk1 box s905x3 firmwareThe HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to...7.8 High
- fruitywifi project fruitywifiA remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly...8.8 High
- jsreport phantom-html-to-pdfArbitrary File Read7.5 High
- jsreport jsreport-chrome-pdfArbitrary File Read6.5 Medium
- absolunet kafeRegular Expression Denial of Service (ReDoS)5.3 Medium
- horizontcms project horizontcmsAn unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated...8.8 High
wiresharkOSS-FuzzHeap-double-free in wmem_simple_free_allNo scoreleptonicaOSS-FuzzHeap-use-after-free in pixChangeRefcountNo score- debian linux, linux kernel, netapp cloud backup +10 more +12 moreA vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been...7.8 High
- linux kernel, redhat enterprise linux +1 moreA Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth...5.3 Medium
- hashicorp consulDenial of service in HashiCorp Consul7.5 High
- databaseschemareader project dbschemareaderUnsafe deserialization in DatabaseSchemaViewer8.0 High
- imomobile verve connect vh510 firmwareThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF...8.8 High
- imomobile verve connect vh510 firmwareThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via...6.1 Medium
- imomobile verve connect vh510 firmwareThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer...5.5 Medium
- imomobile verve connect vh510 firmwareThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented...9.8 Critical
- intelliants subrionSubrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.5.4 Medium
- arubanetworks airwave glassA remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave...9.8 Critical
- arubanetworks airwave glassA remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software...7.2 High
- tcpdumpstr2tokbuf used incorrectly by print-someip.c7.5 High
- tcpdump, apple mac os x, macos +2 more +4 moreppp decapsulator can be convinced to allocate a large amount of memory7.5 High
- jomsocialJomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.9.8 Critical
- creativeitem neoflex video subscription systemNeoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's...6.5 Medium
- easyregistrationforms easy registration formsEasy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry...8.8 High
- codection import and export users and customersImport and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via...8.0 High
- weformspro weformsWeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.9.8 Critical
- phpmyadminphpMyAdmin through 5.0.2 allows CSV injection via Export Section8.8 High
- thedaylightstudio fuel cmsIn FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take...9.8 Critical
- jenkins vmware lab manager slaves, jenkins project vmware lab manager slaves plugin +1 morePassword stored in plain text by Jenkins VMware Lab Manager Slaves Plugin6.5 Medium
- jenkins mail commander, jenkins project mail commander plugin for jenkins-ci plugin +1 morePasswords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin6.5 Medium
- jenkins findbugs, jenkins project findbugs plugin +1 moreStored XSS vulnerability in Jenkins FindBugs Plugin5.4 Medium
- jenkins static analysis utilities, jenkins project static analysis utilities plugin +1 moreStored XSS vulnerability in Jenkins Static Analysis Utilities Plugin5.4 Medium
- jenkins visualworks store, jenkins project visualworks store plugin +1 moreXXE vulnerability in Jenkins Visualworks Store Plugin6.5 Medium
- jenkins appspider, jenkins project appspider plugin +1 morePassword stored in plain text by Jenkins AppSpider Plugin5.5 Medium
- jenkins azure key vault, jenkins project azure key vault plugin +1 moreMissing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs4.3 Medium
- Show moreLoading…