CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Cross-Site Scripting Vulnerability4.3 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Cross-Site Scripting Vulnerability6.4 Medium
- cisco webex meetings desktop app, webex meetings +1 moreCisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability7.3 High
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Cross-Site Scripting Vulnerability6.4 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Cross-Site Scripting Vulnerability6.1 Medium
- cisco ip phones with multiplatform firmware, ip dect 210 firmware, ip dect 6825 firmware +6 more +8 moreCisco IP Phone TCP Packet Flood Denial of Service Vulnerability7.5 High
- cisco webex network recording player, webex meetings, webex meetings server +2 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability7.3 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- cisco sd-wan solution, ios xe +1 moreCisco SD-WAN Software Packet Filtering Bypass Vulnerability5.8 Medium
- cisco integrated management controller, unified computing system (standalone) +1 moreCisco Integrated Management Controller Command Injection Vulnerability6.3 Medium
- cisco ios xr software, ios xr, a99-rp2-se firmware +42 more +44 moreCisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability8.1 High
- cisco sd-wan vmanageCisco SD-WAN vManage Software Command Injection Vulnerability6.7 Medium
- cisco sd-wan vmanage, sd-wan +1 moreCisco SD-WAN vManage Software Arbitrary File Creation Vulnerability6.5 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability5.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerability4.4 Medium
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability4.3 Medium
- cisco telepresence collaboration endpoint, telepresence endpoint software (tc/ce) +1 moreCisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability4.3 Medium
- cisco edge fog fabricCisco Edge Fog Fabric Resource Exposure Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability4.8 Medium
- digium certified asterisk, sangoma asterisk +1 moreA res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before...5.3 Medium
- librdf raptor rdf syntax library, debian linux, fedoraproject fedora +2 moreraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15...7.1 High
- alertaLDAP authentication bypass in Alerta9.1 Critical
- kitabisa telerDenial of Service in teler5.9 Medium
- tenable nessus network monitorA vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could...7.8 High
- b. braun melsungen ag onlinesuite, bbraun onlinesuite application package +1 moreB. Braun OnlineSuite9.8 Critical
- b. braun melsungen ag onlinesuite, bbraun onlinesuite application package +1 moreB. Braun OnlineSuite7.8 High
- b. braun melsungen ag onlinesuite, bbraun onlinesuite application package +1 moreB. Braun OnlineSuite7.8 High
- netapp e-series santricity os controller software, e-series santricity os controller +1 moreSANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability...5.9 Medium
- netapp e-series santricity os controller software, e-series santricity os controller +1 moreSANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability...7.5 High
- hp oneview, synergy composer, synergy composer 2 +2 moreThere is a remote escalation of privilege possible for a malicious user that has a OneView...8.8 High
- tp-link archer a7 firmwareUNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated...6.2 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive...4.3 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker...4.3 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated...5.3 Medium
- lightbend play frameworkData Amplification in Play Framework7.5 High
- lightbend play frameworkOut-of-bounds Write in Play Framework7.5 High
- lightbend play frameworkUncontrolled Recursion in Play Framework7.5 High
- synopsys hub-rest-api-pythonImproper Certificate Validation in blackduck7.5 High
- rust-lang socket2socket2 invalidly assumes the memory layout of std::net::SocketAddr5.5 Medium
- net2 project net2`net2` invalidly assumes the memory layout of std::net::SocketAddr5.5 Medium
- kuka visual components network license server, kuka roboter gmbh visual components network license server 2.0.8 +1 moreRVD#3336: System information disclosure without authentication on KUKA simulators7.5 High
- kuka visual components network license server, kuka roboter gmbh visual components network license server 2.0.8 +1 moreService DoS through arbitrary pointer dereferencing on KUKA simulator8.2 High
- qemu, debian linux +1 moreeth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...6.5 Medium
- qemuati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...6.5 Medium
- linux kernelAn issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel...5.5 Medium
- linuxfoundation nats-server, fedoraproject fedora +1 moreIncorrect handling of credential expiry by /nats-io/nats-server9.8 Critical
- linuxfoundation nats-server, fedoraproject fedora +1 moreNil dereference in NATS JWT, DoS of nats-server7.5 High
- mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 moreMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...7.5 High
- cellinx nvt web serverCellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root...9.8 Critical
- Show moreLoading…