CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...8.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware +1 moreAn issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During...5.5 Medium
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...5.9 Medium
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...9.8 Critical
- vsolcn v1600d firmware, v1600g1 firmware, v1600g2 firmware +2 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and...7.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware +1 moreAn issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. A...7.8 High
ndpiOSS-FuzzSegv on unknown address in ndpi_freeNo score- pyo3 project pyo3Reference counting error in pyo35.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair...5.3 Medium
- linux kernel, netapp cloud backup, element software +4 more +6 moreAn issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5....7.0 High
- linux kernel, netapp hci compute node, hci management node +2 more +4 moreAn issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition...7.0 High
- linux kernel, netapp cloud backup, h410c firmware +4 more +6 moreAn issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11....7.0 High
- linux kernelAn issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4....3.3 Low
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is...4.7 Medium
- linux kernelAn issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the...6.5 Medium
- debian linux, linux kernel, netapp 500f firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory...3.6 Low
grokOSS-FuzzHeap-buffer-overflow in ojph::local::ojph_decode_codeblockNo scoredracoOSS-FuzzGlobal-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>No score- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflation4.8 Medium
- blosc c-blosc2blosc2 heap-based buffer overflow7.8 High
- pcanalyser pc analyserAn issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel...8.8 High
- pcanalyser pc analyserAn issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel...8.8 High
- nlnet labs unboundAn incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as...7.5 High
- craftercms crafter cmsMissing Authorization in Crafter CMS6.5 Medium
- craftercms crafter cmsPath Traversal in Crafter CMS Crafter Studio9.8 Critical
- craftercms crafter cmsCross site scripting in Crafter CMS6.1 Medium
- craftercms crafter cmsXML injection in Crafter CMS8.6 High
- craftercms crafter cmsPath Traversal in Crafter CMS Crafter Studio7.5 High
- craftercms crafter cmsXML Injection in Crafter CMS Crafter Studio 3.0.18.6 High
- craftercms crafter cmsCross-site scripting in Crafter CMS Crafter Studio6.1 Medium
- zyxel access points firmware, zld +1 moreA stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways...9.8 Critical
- softwaremill akka-http-sessionCross-site Request Forgery (CSRF)6.3 Medium
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get...7.5 High
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get...5.3 Medium
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script...9.8 Critical
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands...9.8 Critical
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in...9.8 Critical
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get...7.5 High
- sebhildebrandt systeminformationPrototype Pollution leading to Command Injection in systeminformation8.1 High
- sagemcom f\@st 3486 router firmwareIncorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0,...5.3 Medium
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader...9.8 Critical
- br-automation industrial automation aprolAn issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be...7.5 High
- cyberark endpoint privilege managerCyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential...5.5 Medium
dashopenSUSESecurity update for dashNo score- ericsson bscs ix r18 billing \& rating admx, bscs ix r18 billing \& rating mx +1 moreIn Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is...5.4 Medium
- ericsson bscs ix r18 billing \& rating admx, bscs ix r18 billing \& rating mx +1 moreIn Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is...5.4 Medium
- cpanelIn cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).6.5 Medium
- cpanelcPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).6.1 Medium
- cpanelcPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).4.1 Medium
- coremail xt project xtjsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated...6.1 Medium
- Show moreLoading…