CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that...4.0 Medium
- bd alaris systems manager, alaris 8015 pcu firmware +1 moreBD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager,...7.5 High
- fastadmin-tp6 project fastadmin-tp6In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is...7.2 High
- valvesoftware game networking socketsValve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics...7.5 High
- huawei nip6300 firmware, nip6600 firmware, secospace usg6300 firmware +3 more +5 moreThere is a denial of service vulnerability in some Huawei products. There is no protection...7.5 High
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper...6.7 Medium
- huawei nip6300 firmware, nip6600 firmware, secospace usg6300 firmware +3 more +5 moreSome Huawei products have a command injection vulnerability. Due to insufficient input validation...6.7 Medium
- pixar openusdA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed...8.8 High
- pixar openusdA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed...8.8 High
- pixar openusd, apple ipados, iphone os +2 moreA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed...8.8 High
- pixar openusdA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed...8.8 High
- pixar openusdA heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value...8.8 High
- sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 moreSAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an...6.1 Medium
- pixar openusdA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format...8.8 High
- concread project concreadData races in concread4.7 Medium
- miow project miowmiow invalidly assumes the memory layout of std::net::SocketAddr5.5 Medium
- avaya weblm, aura system manager, system manager +2 moreAvaya WebLM Improper Restriction of XML External Entity Reference6.5 Medium
minizOSS-FuzzUse-of-uninitialized-value in tinfl_decompressNo score- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...7.5 High
- openldap, apple mac os x, macos +5 more +7 moreA flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...7.5 High
- libvnc libvncserver, debian linux, redhat enterprise linux +2 moreA divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use...7.5 High
- postgresql, debian linux +1 moreIncorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL7.5 High
- postgresql, debian linux +1 moreSQL Injection8.8 High
- postgresql, debian linux +1 moreUse of a Broken or Risky Cryptographic Algorithm in PostgreSQL8.1 High
- avaya equinox conferencingAvaya Equinox Conferencing XSS6.3 Medium
- untangle firewall ngUntangle Firewall NG before 16.0 uses MD5 for passwords.5.3 Medium
- couchbase serverExposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between...9.8 Critical
- ckeditor, oracle agile product lifecycle management, application express +6 more +8 moreImproper Neutralization of Input During Web Page Generation in CKEditor46.1 Medium
- resourcexpress meeting monitorSQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to...9.8 Critical
- tranzware payment gateway project payment gatewayA reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1...6.1 Medium
json-logic-jsnpmPrototype Pollution in json-logic-jsNo score- tranzware payment gateway project payment gatewayA reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1...6.1 Medium
- ivanti endpoint managerAn unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1...9.9 Critical
- siemens simatic s7-300 cpu family (incl. related et200 cpus and siplus variants), simatic tdc cpu555, sinumerik 840d sl +12 more +14 moreA vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...7.5 High
- amd vbios flash tool software development kitA potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may...7.8 High
- amd energy driver for linuxA potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to...5.5 Medium
- amd trusted platform modules referenceThe Trusted Platform Modules (TPM) reference software may not properly track the number of times...6.4 Medium
- intel driver \& support assistantIncorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an...5.5 Medium
- intel board id toolIncorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an...7.8 High
- intel quartus primeImproper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime...7.5 High
- intel server board s2600st firmware, server board s2600wf firmware +1 moreImproper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families...6.7 Medium
- intel battery life diagnostic toolImproper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before...7.8 High
- intel data center managerImproper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may...6.5 Medium
- intel data center managerImproper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow...6.5 Medium
- intel data center managerImproper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access.7.8 High
- intel data center managerImproper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may...6.5 Medium
- intel data center managerImproper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may...8.8 High
- intel extreme tuning utilityImproper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated...7.8 High
- intel csi2 host controllerOut of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to...5.5 Medium
- arm armv8-m firmwareIn Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism...7.8 High
- Show moreLoading…