CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- microsoft azure sphereAzure Sphere Elevation of Privilege Vulnerability7.5 High
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability7.3 High
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability6.2 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege Vulnerability5.4 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege Vulnerability6.9 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability7.3 High
- microsoft azure sphereAzure Sphere Denial of Service Vulnerability6.2 Medium
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability6.2 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability7.3 High
- microsoft azure sphereAzure Sphere Tampering Vulnerability5.7 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability6.1 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege Vulnerability6.1 Medium
- microsoft sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1, sharepoint server 2019 +3 more +5 moreMicrosoft SharePoint Information Disclosure Vulnerability5.3 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability8.1 High
pacemakerDebianpacemaker - security updateNo score- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +15 more +17 moreKerberos KDC Security Feature Bypass Vulnerability6.6 Medium
- iliasRemote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect...8.8 High
- iliasAn XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.5.4 Medium
- bluestacksIncorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to...7.8 High
- dundas biThe server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing...5.4 Medium
- dundas biThe server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button...5.4 Medium
- cantoThe Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.7.2 High
- intelliants subrion cmsSubrion CMS CSRF Vulnerability8.8 High
- ilex international sign\&goIlex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a...7.8 High
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreA flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem...4.1 Medium
- xen, debian linux, fedoraproject fedora +2 moreXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES...4.4 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...5.5 Medium
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...5.5 Medium
- debian linux, fedoraproject fedora, intel celeron 3855u firmware +298 more +300 moreObservable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...5.5 Medium
- intel celeron 3855u firmware, celeron 3865u firmware, celeron 3955u firmware +296 more +298 moreInsufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an...5.5 Medium
- tcl 32s330 firmware, 40s330 firmware, 43s434 firmware +4 more +6 moreA vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01...7.8 High
- tibco iprocess workspace browser, tibco software inc. iprocess workspace (browser) +1 moreTIBCO iProcess Workspace Browser CSRF5.0 Medium
- tcl 32s330 firmware, 40s330 firmware, 43s434 firmware +4 more +6 moreA vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01...6.5 Medium
- sap erp client for e-bilanz, sap se erp client for e-bilanz 1.0 +1 moreSAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem...4.4 Medium
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...7.5 High
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...10.0 Critical
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...10.0 Critical
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...6.5 Medium
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...10.0 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file...4.3 Medium
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...10.0 Critical
- sap process integration \(pgp module - business-to-business add on\), sap se process integration (pgp - module business-to-business add on) +1 moreSAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an...4.9 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreSAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...9.1 Critical
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...5.4 Medium
- sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 moreSAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an...8.6 High
- sap se as abap(dmis), s4 hana(dmis), sap as abap\(dmis\) +1 more +3 moreSAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730,...9.1 Critical
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...5.3 Medium
- sap erp, sap se s/4 hana, sap s\/4hana +2 moreSAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he...4.3 Medium
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...5.3 Medium
- set project setPrototype pollution in @strikeentco/set7.5 High
- Show moreLoading…