CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- google chromeInsufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed...6.5 Medium
- google chromeUse after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote...9.6 Critical
- google chromeHeap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who...9.6 Critical
- google chromeUse after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to...8.8 High
- google chromeInsufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a...8.8 High
- google chromeRace in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker...7.5 High
- google chromeInappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66...8.8 High
- google chromeInappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66...8.8 High
- google chromeUse after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who...9.6 Critical
- google chromeInsufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote...8.8 High
- google chromeUse after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had...9.6 Critical
datasette-graphqlPyPIdatasette-graphql leaks details of the schema of private database filesNo score- highlightjs highlight.js, debian linux, oracle mysql enterprise monitor +2 morePrototype Pollution in highlight.js5.8 Medium
datasette-indieauthPyPIImplementation trusts the "me" field returned by the authorization server without verifying itNo score- jupyter server, jupyter-server jupyter server +1 moreOpen redirect in Jupyter Server4.1 Medium
- totolink a850r-v1 firmware, f1-v2 firmware, f2-v1 firmware +5 more +7 moreAn issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1...7.5 High
- totolink a850r-v1 firmware, f1-v2 firmware, f2-v1 firmware +5 more +7 moreAn issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...5.9 Medium
- cdata fd1104 firmware, cdatatec 72408a firmware, 9008a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...7.5 High
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...7.5 High
- hrsaleHRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.6.1 Medium
- real time automation 499es ethernet/ip (enip) adaptor source code, rtautomation 499es ethernet\/ip adaptor firmware +1 moreReal Time Automation EtherNet/IP9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is...9.8 Critical
- red hat wildflyWildfly logs plaintext passwords5.3 Medium
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s):...9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s)...9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s)...6.5 Medium
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The...9.8 Critical
- musl-libc musl, debian linux, fedoraproject fedora +1 more +3 moreIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...5.5 Medium
- apache unomiRemote Code Execution in Apache Unomi9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8....7.5 High
- karenderia multiple restaurant system project multiple restaurant systemA SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting...9.8 Critical
- fastweb fastgate gpon fga2130fwb firmwareFastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router...8.8 High
- microstrategyA Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019...6.5 Medium
- seeddmsOpen redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.6.1 Medium
- crixp opencrxCRIXP OpenCRX Unverified Password Change9.1 Critical
- redhat gluster-blockAn information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the...5.5 Medium
- heketi project heketi, redhat enterprise linux, gluster storage +1 more +3 moreHeketi logs sensitive information5.5 Medium
- schedmd slurm, debian linux +1 moreSlurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized...3.7 Low
- schedmd slurm, debian linux +1 moreSlurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.9.8 Critical
- xenAn issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial...8.8 High
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1...8.8 High
- Show moreLoading…