CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- debian linux, linux kernel +1 moreA slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local...5.0 Medium
- tp-link wdr7400 firmware, wdr7500 firmware, wdr7660 firmware +12 more +14 moreBuffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP...9.8 Critical
- saitoha libsixelUnverified indexs into the array lead to out of bound access in the gif_out_code function in...6.5 Medium
- netis korea d'live set-top box ap(wf2429tb), netu wf2429tb firmware +1 moreD'live AP command injection vulnerability6.4 Medium
- micro focus netiq identity manager, microfocus identity manager +1 moreNetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection...9.8 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected...5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes...7.8 High
- ceph, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...8.8 High
- mitsubishi electric corporation melsec iq-r, mitsubishielectric rj71en71 firmware, rj71gf11-t2 firmware +26 more +28 moreUncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU...7.5 High
matioOSS-FuzzHeap-buffer-overflow in H5D__scatter_memNo score- imagemagick, debian linux +1 moreStack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick...7.8 High
- ibm aix, vios, fedoraproject fedora +3 more +5 moreIBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive...5.1 Medium
- schneider-electric enterprise server installerA CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation...7.0 High
- bigbluebuttonIn BigBlueButton before 2.2.29, a user can vote more than once in a single poll.4.3 Medium
- bigbluebuttonweb/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter...5.3 Medium
- schneider-electric modicon m221 firmwareA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in...4.3 Medium
- schneider-electric modicon m221 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all...5.7 Medium
- schneider-electric modicon m221 firmwareA CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all...7.3 High
- schneider-electric modicon m221 firmwareA CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references,...7.3 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric operator terminal expert runtimeA CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal...7.8 High
- schneider-electric ecostruxure control expertA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...7.5 High
- schneider-electric ecostruxure control expertA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC...7.5 High
- schneider-electric ecostruxure control expertA CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on...8.8 High
- schneider-electric ecostruxure control expertA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC...9.8 Critical
- schneider-electric ecostruxure control expertA CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control...7.8 High
- schneider-electric webreportsA CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation...6.5 Medium
- schneider-electric webreportsA CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in...8.8 High
- schneider-electric webreportsA CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site...5.4 Medium
- schneider-electric webreportsA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored...5.4 Medium
- schneider-electric webreportsA CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure...8.8 High
- schneider-electric ecostruxure building operationA CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)...6.1 Medium
- pritunl pritunl-client-electronPrivilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2...7.8 High
- sokrates sowasqlA Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1...6.1 Medium
- rclone, fedoraproject fedora +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator in Rclone7.5 High
- openwrtlibuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when...9.8 Critical
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDeserialization of Untrusted Data in Archive_Tar7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreMultiple vulnerabilities through filename manipulation in Archive_Tar7.8 High
- yzmcmsIn YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting ...6.1 Medium
- misp-project mispIn MISP 2.4.134, XSS exists in the template element index view because the id parameter is...6.1 Medium
- beckhoff twincat xar 3.1, twincat extended automation runtime +1 moreBeckhoff: Privilege Escalation through TwinCat System7.3 High
- endress orsg35 firmware, orsg45 firmware, rsg35 firmware +5 more +7 moreENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor6.5 Medium
- Show moreLoading…