CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- harman hermesA misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with...2.4 Low
- harman hermesA misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with...2.4 Low
- harman hermesAn authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker...4.6 Medium
- harman hermesAn authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with...4.6 Medium
- harman hermesAn authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker...4.6 Medium
- controlled-merge project controlled-mergePrototype pollution in controlled-merge7.5 High
qemuOSS-FuzzHeap-buffer-overflow in msix_vector_maskedNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_parser_json_doNo scorearrowOSS-FuzzGlobal-buffer-overflow in arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLike<arrow::LiNo scoreopenscOSS-FuzzStack-buffer-overflow in insert_keyNo scorewolfsslOSS-FuzzHeap-buffer-overflow in wolfSSH_CleanPathNo scorearrowOSS-FuzzHeap-buffer-overflow in void arrow::internal::TransferBitmap<No score- google chromeUse after free in CefSharp9.6 Critical
- google chromeInappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote...9.6 Critical
- google chrome, chromium v8 +1 moreInappropriate implementation in V8 in CefSharp8.8 High
- doc-path project doc-pathPrototype Pollution7.5 High
- appendix project appendixData races in appendix5.9 Medium
- toolshed project toolshedData races in toolshed8.1 High
- scottqueue project scottqueueData races in scottqueue8.1 High
- signal-simple project signal-simpleData races in signal-simple8.1 High
- unicycle project unicycleData races in unicycle8.1 High
- parc project parcData races in parc8.1 High
- rcu cell project cellData races in rcu_cell8.1 High
- debian linux, linux kernel, starwindsoftware command center +3 more +5 moreA flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if...5.5 Medium
arpwatchMageiaUpdated arpwatch package fixes a security vulnerabilityNo scorechromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilitiesNo score- fedoraproject fedora, tpm2 software stack project software stack +1 moreMissing initialization of a variable in the TPM2 source may allow a privileged user to...6.7 Medium
- passmark burnintest, osforensics, performancetest +2 moreAn issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and...7.8 High
- dyne tombask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY...9.8 Critical
- intel proset\/wireless wifiInsufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before...8.8 High
- intel open webrtc toolkitInsufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an...9.8 Critical
- intel atom 230 firmware, atom 330 firmware, atom x5-e3930 firmware +58 more +60 moreImproper access control in the PMC for some Intel(R) Processors may allow a privileged user to...6.7 Medium
- nagios xiImproper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...7.8 High
- rconfiglib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to...9.8 Critical
- eclipse hono, the eclipse foundation eclipse hono +1 moreImproper Validation of Specified Quantity in Input in Eclipse Hono7.5 High
- opera touchOpera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The...4.3 Medium
- oneidentity password managerAn issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid...5.3 Medium
- radarcovid radar-covid-backend-dp3t-server, radarcovid +1 moreDeanonymization of COVID-19 positive users of Radar COVID7.4 High
shopware/shopwarePackagistPersistent XSS in newsletter module in ShopwareNo scoreshopware/shopwarePackagistPersistent XSS in shopping worldsNo score- spreeAuthorization bypass in Spree7.7 High
- linux kernel, redhat enterprise linux +1 moreA flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that...7.4 High
- dependabot dependabot-core, dependabot project dependabot +1 moreRemote code execution in dependabot-core8.7 High
shopware/shopwarePackagistPersistent XSS in customer module in ShopwareNo score- nexcom nio 50 firmwareThe affected product does not properly validate input, which may allow an attacker to execute a...7.5 High
- nexcom nio 50 firmwareThe affected product transmits unencrypted sensitive information, which may allow an attacker to...7.5 High
- cmsuno project cmsunoIn CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her...8.8 High
- cmsuno project cmsunoAn authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php...8.8 High
- netapp hci, element os +1 moreElement Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a...6.5 Medium
- netapp hci, element os +1 moreElement Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a...7.5 High
- Show moreLoading…