CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- cisco integrated management controller, unified computing system (standalone), enterprise nfv infrastructure software +2 moreCisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities9.8 Critical
- cisco webex meetings server, webex meetings +1 moreCisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability5.3 Medium
- cisco webex meetings serverCisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability6.5 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Missing API Authentication Vulnerability7.5 High
- cisco asyncos, web security appliance (wsa) +1 moreCisco Secure Web Appliance Privilege Escalation Vulnerability5.3 Medium
- cisco webex meetingsCisco Webex Meetings API Cross-Site Scripting Vulnerability6.1 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Improper Domain Access Control Vulnerability4.1 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability4.1 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director File Overwrite Vulnerability4.9 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Improper Access Control Vulnerability5.0 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Information Disclosure Vulnerability5.3 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network REST API Insufficient Input Validation Vulnerability6.3 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability8.7 High
- cisco roomos, telepresence endpoint software (tc/ce), telepresence collaboration endpoint +2 moreCisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability5.5 Medium
drupal/miniorange_samlPackagistThis module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website. The module has two Authentication Bypass vulnerabilities.No score- ibm mq applianceIBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration...5.3 Medium
- drupal, drupal core, fedoraproject fedora +2 moreDrupal core Unrestricted Upload of File with Dangerous Type8.8 High
drupal/examplesPackagistThe File Example submodule within the Examples project does not properly sanitize certain filenames as described in SA-CORE-2020-012, along with other related vulnerabilities. Therefore, File Example…No score- reddoxx maildepotREDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.6.1 Medium
- trustedcomputinggroup trusted platform moduleTrusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification...7.2 High
- cxuu cxuucmscxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data...7.5 High
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 High
- lemocmsapp\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload...7.3 High
- tp-link tl-wpa4220 firmwarehttpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to...8.8 High
- tp-link tl-wpa4220 firmwarehttpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated...6.5 Medium
- rsa archerRSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated...6.1 Medium
- palletsprojects werkzeugOpen Redirect in werkzeug6.1 Medium
- valvesoftware game networking socketsValve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments...9.8 Critical
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon...8.1 High
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...8.8 High
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +17 more +19 moreA CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon...8.8 High
- kamailioKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2...5.4 Medium
- phpgurukul user registration \& login and user management systemCross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in...4.8 Medium
- time-rs timeSegmentation fault in Rust time crate5.3 Medium
- qemu, debian linux +1 moreA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...3.2 Low
- view frontend statistics project frontend statisticsAn issue was discovered in the view_statistics (aka View frontend statistics) extension before 2...6.5 Medium
- linux kernelA buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15...5.8 Medium
- go toolchain cmd/go, golang go +1 moreArbitrary code execution via the go command with cgo in cmd/go7.5 High
- go toolchain cmd/cgo, cmd/go, golang go +3 more +5 moreArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 High
- water billing system project billing systemSQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and...9.8 Critical
- pescms teamPESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id...6.1 Medium
- katacontainers kata-containersAn improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a...7.1 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions...9.8 Critical
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that...7.5 High
- fluid-cloudnative fluidCross-Site Scripting in TYPO3 Fluid8.0 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored...7.5 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing...7.5 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection...7.5 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule:...8.8 High
- Show moreLoading…