CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- intel converged security and manageability engine, server platform services, trusted execution technology +2 moreInsecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions...6.8 Medium
- intel converged security and management engine, server platform services, trusted execution engine +3 more +5 moreImproper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10,...7.8 High
- intel converged security and manageability engine, trusted execution technology, siemens simatic drive controller firmware +19 more +21 moreInsufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11...6.8 Medium
- intel dynamic application loader software developement kitImproper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may...7.8 High
- intel converged security and manageability engine, trusted execution technology +1 moreImproper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80...7.8 High
- intel active management technology firmware, standard manageability +1 moreOut-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11...7.5 High
- intel active management technology firmware, standard manageability, netapp cloud backup +2 moreOut-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11...9.8 Critical
- intel bios, netapp aff bios, fas bios +3 more +5 moreUse of potentially dangerous function in Intel BIOS platform sample code for some Intel(R)...7.8 High
- intel bios, netapp aff bios, fas bios +3 more +5 moreOut of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a...6.7 Medium
- intel bios, netapp cloud backup, fas\/aff bios +3 more +5 moreImproper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before...6.7 Medium
- intel bios, netapp aff bios, fas bios +3 more +5 moreImproper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user...6.7 Medium
- intel quartus prime pro, stratix 10 fpga firmware +1 moreImproper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel...6.8 Medium
- intel quartus prime, stratix 10 fpga firmware +1 moreImproper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel...6.8 Medium
- intel v710-at2 firmware, x710-at2 firmware, x710-bm2 firmware +5 more +7 moreA logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a...6.7 Medium
- intel v710-at2 firmware, x710-at2 firmware, x710-bm2 firmware +5 more +7 moreProtection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may...6.7 Medium
- intel v710-at2 firmware, x710-at2 firmware, x710-bm2 firmware +5 more +7 moreInsufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers...6.7 Medium
- intel v710-at2 firmware, x710-at2 firmware, x710-bm2 firmware +5 more +7 moreImproper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may...6.7 Medium
- lcds leã£o consultoria e desenvolvimento de sistemas ltda me versions, intel visual compute accelerator 2 firmware +1 moreImproper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a...4.4 Medium
- lcds leã£o consultoria e desenvolvimento de sistemas ltda me versions, intel visual compute accelerator 2 firmware +1 moreImproper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a...6.7 Medium
- intel optane ssd 900p firmware, optane ssd 905p firmware, ssd dc p4800x firmware +1 more +3 moreBuffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD...6.2 Medium
- intel optane ssd 900p firmware, optane ssd 905p firmware, ssd 660p firmware +12 more +14 moreInsufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R)...4.6 Medium
- intel optane ssd 900p firmware, optane ssd 905p firmware, ssd 660p firmware +12 more +14 moreInsufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R)...4.6 Medium
- intel optane ssd 900p firmware, optane ssd 905p firmware, ssd 660p firmware +12 more +14 moreInsufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R)...4.6 Medium
- intel biosOut of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user...6.7 Medium
- intel biosImproper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged...6.7 Medium
- intel biosImproper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged...6.7 Medium
- intel bios, siemens simatic cpu 1518-4 firmware, simatic cpu 1518f-4 firmware +2 moreImproper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged...6.7 Medium
- intel biosImproper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged...6.7 Medium
- intel xeon bronze 3104 firmware, xeon bronze 3106 firmware, xeon bronze 3204 firmware +134 more +136 moreImproper input validation in BIOS firmware for some Intel(R) Processors may allow an...7.8 High
- intel uniteImproper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064...5.5 Medium
- intel media sdkImproper file permissions in the installer for the Intel(R) Media SDK for Windows before version...7.8 High
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled...7.5 High
- ivanti endpoint managerSeveral services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with...7.8 High
- sugarcrmAn authorization bypass and PHP local-file-include vulnerability in the installation component of...9.8 Critical
- sharpred deephasPrototype Pollution in deephas9.8 Critical
- mjpclab object-hierarchy-accessPrototype pollution in object-hierarchy-access9.8 Critical
- exodus fieldPrototype Pollution in field9.8 Critical
- ivanti endpoint managerVarious components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when...7.8 High
- adobe acrobat readerImproper Access Control in Adobe Acrobat Reader for Android5.5 Medium
- adobe connectReflected Cross-Site Scripting (XSS) in Adobe Connect6.1 Medium
- adobe connectReflected Cross-Site Scripting (XSS) in Adobe Connect6.1 Medium
- red hat ansible, redhat ansible engine, debian linux +2 moreInsufficiently random values in Ansible5.5 Medium
nodejs-nodemonAlmaLinux,nodejs-packagingAlmaLinux +1 morenodejs:14 bug fix and enhancement updateNo score- huawei fusioncomputeFusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with...4.4 Medium
- python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 moreTiming attacks in python-rsa7.5 High
- goodlayers good learning management systemAn unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to...9.8 Critical
apportUbuntuapport regressionNo score- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPath6.1 Medium
- bunch project bunchData races in bunch8.1 High
- image-rs imageMutable reference with immutable provenance in image5.5 Medium
- Show moreLoading…