CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
openvswitchOSS-FuzzHeap-buffer-overflow in get_32aligned_be64No scorepopplerOSS-FuzzUse-of-uninitialized-value in isSameGfxColorNo scorelibdatetime-timezone-perlDebianlibdatetime-timezone-perl - regression updateNo scorepacemakerDebianpacemaker - regression updateNo score- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...8.8 High
- mozilla firefoxWhen listening for page changes with a Mutation Observer, a malicious web page could confuse...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSome websites have a feature "Show Password" where clicking a button will change a password field...6.5 Medium
- mozilla firefoxRepeated calls to the history and location interfaces could have been used to hang the browser....4.3 Medium
- mozilla firefoxCross-origin iframes that contained a login form could have been recognized by the login autofill...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf the Compact() method was called on an nsTArray, the array could have been reallocated without...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring browser shutdown, reference decrementing could have occured on a previously freed object,...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox did not block execution of scripts with incorrect MIME types when the response was...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...4.3 Medium
- mozilla firefoxIncorrect bookkeeping of functions inlined during JIT compilation could have led to memory...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...6.1 Medium
- google chrome, mozilla firefox +1 moreSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a...4.3 Medium
- keycloakImproper privilege management in Keycloak8.1 High
- prestashopImproper Access Control in PrestaShop7.5 High
- prestashop product comments, productcomments +1 moreReflected XSS in PrestaShop Product Comments8.7 High
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ...9.9 Critical
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ...9.9 Critical
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ...9.9 Critical
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ...9.9 Critical
- horizontcms project horizontcmsAn unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote...8.8 High
- x-stream xstream, apache activemq, debian linux +12 more +14 moreRemote Code Execution in XStream8.0 High
- airleader master controlAirleader Master <= 6.21 devices have default credentials that can be used to access the exposed...9.8 Critical
- airleader master controlAirleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial...7.5 High
- canon oce colorwave 3500 firmwareThe WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve...9.8 Critical
- gilacms gila cmsIn Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the...7.2 High
- wwbn avideoAVideo vulnerable to Improper Privilege Management8.8 High
- wwbn avideoThere was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An...7.5 High
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).5.4 Medium
- cloudavid pparamMemory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1.7.5 High
- ibm sterling file gatewayIBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...4.8 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...7.5 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...4.3 Medium
- ibm business automation workflowIBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...6.5 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...6.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2...6.5 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a...5.3 Medium
- Show moreLoading…