CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- joplin project joplinCross-site scripting in Joplin6.1 Medium
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...6.5 Medium
- maxmind libmaxminddb, debian linux, fedoraproject fedora +2 morelibmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.6.5 Medium
- studyplus inc. app, wantedlyinc studyplus +1 moreStudyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a...5.5 Medium
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreResource management error vulnerability in TCP/IP function included in the firmware of GT14 Model...7.5 High
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreImproper neutralization of argument delimiters in a command ('Argument Injection') vulnerability...9.8 Critical
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreImproper access control vulnerability in TCP/IP function included in the firmware of GT14 Model...9.8 Critical
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreNULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model...7.5 High
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreSession fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT...7.5 High
- mitsubishi electric corporation gt14 model of got 1000 series, mitsubishielectric coreos +1 moreBuffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT...9.8 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote...6.5 Medium
- zte zxa10 eodn firmwareA ZTE product is impacted by an information leak vulnerability. An attacker could use this...8.8 High
- microfocus self service password resetSensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR)...7.5 High
- apache shiro, debian linux +1 moreAuthentication bypass in Apache Shiro9.8 Critical
- hp apollo 2000 firmware, apollo 4200 gen10 firmware, apollo 4500 firmware +18 more +20 moreA local elevation of privilege using physical access security vulnerability was found in HPE...6.8 Medium
- moxa, moxa mxview +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- moxa, moxa mxview +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- linux kernel, redhat enterprise linux +1 moreA Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth...7.5 High
firefoxUbuntufirefox regressionsNo score- checkpoint endpoint securityCheck Point Endpoint Security for Windows before E84.10 can reach denial of service during clean...5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC for macOS Signature Validation Bypass2.8 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Local Privilege Escalation via Installer Component7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Use-After-Free Vulnerability Could Lead to Information Disclosure3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Arbitrary JavaScript Execution in PDF Documents6.7 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege Escalation7.7 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC for macOS Dynamic Library Injection Vulnerability4.4 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation7.7 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- f5 big-ip advanced web application firewall, big-ip fraud protection service +1 moreIn BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7,...7.5 High
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed...6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page...8.4 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting ...5.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within...7.5 High
- f5 big-ip policy enforcement manager, f5 networks, inc. big-ip (pem) +1 moreIn BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3...7.5 High
- tenable nessus, nessus agent +1 moreA vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1...7.8 High
- silver peak systems, inc. unity orchestratorSilver Peak Unity OrchestratorTM subject to path traversal.6.6 Medium
- silver peak systems, inc. unity orchestratorUnauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.6.6 Medium
- silver peak systems, inc. unity orchestratorSilver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.6.6 Medium
- ui unifi protect firmwareA security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in...5.3 Medium
- telerik fiddlerTelerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a...8.8 High
- marmindA CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application...7.8 High
- marmindA Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4...6.1 Medium
- Show moreLoading…