CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- im project imData races in im4.7 Medium
- bitdefender update serverInsufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender...7.1 High
- mitel shoretel firmwareThe conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated...6.1 Medium
- chirpstack network server** DISPUTED ** An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0...6.5 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API2.7 Low
- magento, adobe magento commerce +1 moreArbitrary code execution via file import functionality9.1 Critical
- magento, adobe magento commerce +1 moreDocument root path disclosure on Maintenance page3.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data4.3 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions could lead to unauthorized modification of inventory source data via REST API2.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions following the deletion of a user role or deactivation of a user6.5 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API4.9 Medium
- magento, adobe magento commerce +1 moreSQL injection allows arbitrary read from database7.1 High
openh264OSS-FuzzUse-of-uninitialized-value in WelsDec::WelsDeblockingMbNo score- moinmo moinmoin, debian linux +1 moreMoinMoin vulnerable to remote code execution via cache action9.8 Critical
- moinmo moinmoin, moinwiki moin-1.9 +1 moremalicious SVG attachment causing stored XSS vulnerability in MoinMoin8.7 High
- tp-link ac1750 firmwaretdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute...9.8 Critical
- delvedor find-my-wayWeb Cache Poisoning5.9 Medium
suricataMageiaUpdated suricata packages fix security vulnerabilitiesNo score- lock api project apiData races in lock_api4.7 Medium
- lock api project apiData races in lock_api4.7 Medium
- lock api project apiData races in lock_api4.7 Medium
- lock api project apiData races in lock_api4.7 Medium
- lock api project apiData races in lock_api5.5 Medium
- protocol multihashUnexpected panic in multihash7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software....7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) (Exynos990 chipsets) software. The...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (China / India)...7.8 High
fluent-bitOSS-FuzzHeap-double-free in flb_freeNo scorefluent-bitOSS-FuzzHeap-double-free in flb_freeNo scorematioOSS-FuzzUse-of-uninitialized-value in Mat_VarReadNextInfo5No scorefluent-bitOSS-FuzzHeap-buffer-overflow in _flb_strptimeNo scorehostapOSS-FuzzUNKNOWN READ in wpabuf_freeNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in tdefl_compress_lz_codesNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_gzip_compressNo score- welcart e-commerceThe usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object...7.5 High
solidityOSS-FuzzStack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolverNo scorewolfsslOSS-FuzzUse-of-uninitialized-value in memory_testNo score- auth0 ad-ldap-connector, ad\/ldap connector +1 moreCSRF in Auth0 ad-ldap-connector8.1 High
- axios, siemens sinec ins +1 moreAxios vulnerable to Server-Side Request Forgery5.9 Medium
- salesagility suitecrmSuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File...8.8 High
- cisco webex network recording player, webex meetings +1 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex network recording player, webex meetings, webex meetings server +2 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Authorization Bypass Vulnerability6.5 Medium
- Show moreLoading…