{"id":6547,"date":"2020-10-30T08:02:29","date_gmt":"2020-10-30T11:02:29","guid":{"rendered":"https:\/\/addvalue.com.br\/novo\/?p=6547"},"modified":"2020-10-30T14:21:28","modified_gmt":"2020-10-30T17:21:28","slug":"resumo_vulnerabilidade","status":"publish","type":"post","link":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/","title":{"rendered":"Resumo de Vulnerabilidades da Semana de 12 de outubro de 2020"},"content":{"rendered":"

O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Em alguns casos, as vulnerabilidades do Boletim podem n\u00e3o ter pontua\u00e7\u00f5es CVSS atribu\u00eddas ainda. Visite o NVD (https:\/\/nvd.nist.gov\/vuln\/search<\/a>) para obter informa\u00e7\u00f5es de vulnerabilidade atualizadas, que incluem as pontua\u00e7\u00f5es CVSS assim que estiverem dispon\u00edveis.<\/p>\n

Destaque Semanal<\/strong><\/span><\/p>\n

O destaque de alerta de vulnerabilidades desta semana vai para os dispositivos de conectividade da Netgear devido a sua popularidade, exposi\u00e7\u00e3o e grau de risco.<\/p>\n

Vale destacar que estes dispositivos est\u00e3o geralmente conectados \u00e0 Internet e permitem o acesso remoto, juntando com vulnerabilidades que podem burlar os controles de acesso como autentica\u00e7\u00e3o, formam uma combina\u00e7\u00e3o t\u00f3xica e perigosa para o funcionamento adequado da rede.<\/p>\n

\u00c9 recomendado aos administradores e usu\u00e1rios destas tecnologias afetadas, consultarem o site do fabricante para uma atualiza\u00e7\u00e3o de software do produto e uma an\u00e1lise peri\u00f3dica de vulnerabilidades para manter os dispositivos sempre atualizados com os \u00faltimos patches de corre\u00e7\u00e3o.<\/p>\n\n\n\n
\n\n\n\n
<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

You are subscribed to National Cyber Awareness System Bulletins for Cybersecurity and Infrastructure Security Agency. This information has recently been updated, and is now available.<\/p>\n

Vulnerability Summary for the Week of October 12, 2020<\/strong><\/a><\/p>\n

10\/19\/2020 07:14 AM EDT<\/em><\/p>\n

Original release date: October 19, 2020<\/p>\n

The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD<\/a>. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.<\/p>\n

High Vulnerabilities<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Primary
\nVendor -- Product<\/strong><\/td>\n		Description<\/strong><\/td>\nPublished<\/strong><\/td>\nCVSS Score<\/strong><\/td>\nSource & Patch Info<\/strong><\/td>\n<\/tr>\n<\/thead>\n
foxitsoftware -- foxit_reader<\/td>\nThis vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit PhantomPDF Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-11308.<\/td>\n2020-10-13<\/td>\n7.2<\/a><\/td>\nCVE-2020-17415<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
foxitsoftware -- foxit_reader<\/td>\nThis vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-11229.<\/td>\n2020-10-13<\/td>\n7.2<\/a><\/td>\nCVE-2020-17414<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585<\/td>\n2020-10-14<\/td>\n9.3<\/a><\/td>\nCVE-2020-0416<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn gatt_process_read_by_type_rsp of gatt_cl.cc<\/a>, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158833854<\/td>\n2020-10-14<\/td>\n7.8<\/a><\/td>\nCVE-2020-0377<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705<\/td>\n2020-10-14<\/td>\n7.2<\/a><\/td>\nCVE-2020-0420<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517<\/td>\n2020-10-14<\/td>\n7.2<\/a><\/td>\nCVE-2020-0421<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThere is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257<\/td>\n2020-10-14<\/td>\n9.4<\/a><\/td>\nCVE-2020-0283<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156<\/td>\n2020-10-14<\/td>\n9.4<\/a><\/td>\nCVE-2020-0376<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256<\/td>\n2020-10-14<\/td>\n9.4<\/a><\/td>\nCVE-2020-0371<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThere is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455<\/td>\n2020-10-14<\/td>\n9.4<\/a><\/td>\nCVE-2020-0367<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThere is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705<\/td>\n2020-10-14<\/td>\n9.4<\/a><\/td>\nCVE-2020-0339<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009<\/td>\n2020-10-14<\/td>\n7.2<\/a><\/td>\nCVE-2020-0408<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- p30_pro_firmware<\/td>\nHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the process reboot.<\/td>\n2020-10-12<\/td>\n7.1<\/a><\/td>\nCVE-2020-9108<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- p30_pro_firmware<\/td>\nHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the process reboot.<\/td>\n2020-10-12<\/td>\n7.1<\/a><\/td>\nCVE-2020-9107<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
ibm -- cognos_analytics<\/td>\nIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.<\/td>\n2020-10-12<\/td>\n9.3<\/a><\/td>\nCVE-2020-4302<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium<\/td>\nIBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696.<\/td>\n2020-10-12<\/td>\n8.5<\/a><\/td>\nCVE-2020-4689<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
lenovo -- diagnostics<\/td>\nA DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.<\/td>\n2020-10-14<\/td>\n7.2<\/a><\/td>\nCVE-2020-8338<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6200_firmware<\/td>\nCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6050 before 1.0.1.22, JR6150 before 1.0.1.22, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R69002 before 1.2.0.62, and WNR2020 before 1.1.0.62.<\/td>\n2020-10-09<\/td>\n10<\/a><\/td>\nCVE-2020-26908<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d7800_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.58 and R7500v2 before 1.0.3.48.<\/td>\n2020-10-09<\/td>\n8.3<\/a><\/td>\nCVE-2020-26909<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- rbk752_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.<\/td>\n2020-10-09<\/td>\n8.3<\/a><\/td>\nCVE-2020-26902<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- rbk852_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.<\/td>\n2020-10-09<\/td>\n7.7<\/a><\/td>\nCVE-2020-26907<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Medium Vulnerabilities<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Primary
\nVendor -- Product<\/strong><\/td>\n		Description<\/strong><\/td>\nPublished<\/strong><\/td>\nCVSS Score<\/strong><\/td>\nSource & Patch Info<\/strong><\/td>\n<\/tr>\n<\/thead>\n
apache -- fineract<\/td>\nThe implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.<\/td>\n2020-10-13<\/td>\n5<\/a><\/td>\nCVE-2018-20243<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
foxitsoftware -- 3d<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11226.<\/td>\n2020-10-13<\/td>\n6.8<\/a><\/td>\nCVE-2020-17413<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
foxitsoftware -- 3d<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11224.<\/td>\n2020-10-13<\/td>\n6.8<\/a><\/td>\nCVE-2020-17412<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
foxitsoftware -- 3d<\/td>\nThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11190.<\/td>\n2020-10-13<\/td>\n4.3<\/a><\/td>\nCVE-2020-17411<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
foxitsoftware -- foxit_reader<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11135.<\/td>\n2020-10-13<\/td>\n6.8<\/a><\/td>\nCVE-2020-17410<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
garfield_petshop_project -- garfield_petshop<\/td>\nA cross-site request forgery (CSRF) vulnerability in mod\/user\/act_user.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.<\/td>\n2020-10-09<\/td>\n6.8<\/a><\/td>\nCVE-2020-26522<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-159062405<\/td>\n2020-10-14<\/td>\n4.9<\/a><\/td>\nCVE-2020-0246<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801<\/td>\n2020-10-14<\/td>\n4.3<\/a><\/td>\nCVE-2020-0411<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn gatt_process_read_by_type_rsp of gatt_cl.cc<\/a>, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659<\/td>\n2020-10-14<\/td>\n5<\/a><\/td>\nCVE-2020-0413<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561<\/td>\n2020-10-14<\/td>\n4.9<\/a><\/td>\nCVE-2020-0400<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-157748906<\/td>\n2020-10-14<\/td>\n4.9<\/a><\/td>\nCVE-2020-0378<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381<\/td>\n2020-10-14<\/td>\n4.9<\/a><\/td>\nCVE-2020-0398<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-137284057<\/td>\n2020-10-14<\/td>\n4.6<\/a><\/td>\nCVE-2019-2194<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn AudioFlinger::RecordThread::threadLoop of audioflinger\/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122<\/td>\n2020-10-14<\/td>\n4.3<\/a><\/td>\nCVE-2020-0414<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- fusionaccess<\/td>\nFusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product.<\/td>\n2020-10-12<\/td>\n4.6<\/a><\/td>\nCVE-2020-9090<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
ibm -- cognos_analytics<\/td>\nIBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270.<\/td>\n2020-10-12<\/td>\n6.4<\/a><\/td>\nCVE-2020-4388<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- infosphere_information_server<\/td>\nIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150.<\/td>\n2020-10-12<\/td>\n4.3<\/a><\/td>\nCVE-2020-4740<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium<\/td>\nIBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to. IBM X-Force ID: 186423.<\/td>\n2020-10-12<\/td>\n4<\/a><\/td>\nCVE-2020-4678<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
linux -- linux_kernel<\/td>\nA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.<\/td>\n2020-10-13<\/td>\n5<\/a><\/td>\nCVE-2020-25645<\/a>
\nSUSE<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.<\/td>\n2020-10-09<\/td>\n5.2<\/a><\/td>\nCVE-2020-26910<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26928<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26926<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6100_firmware<\/td>\nCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, SRK60 before 2.2.2.20, SRR60 before 2.2.2.20, SRS60 before 2.2.2.20, WN3000RPv2 before 1.0.0.78, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.70, XR450 before 2.3.2.40, and XR500 before 2.3.2.40.<\/td>\n2020-10-09<\/td>\n5.2<\/a><\/td>\nCVE-2020-26913<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6200_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, and WNR2020 before 1.1.0.62.<\/td>\n2020-10-09<\/td>\n5.2<\/a><\/td>\nCVE-2020-26914<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6200_firmware<\/td>\nCertain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.50, and WNR2020 before 1.1.0.62.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26916<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6200_firmware<\/td>\nCertain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, and WNR2020 before 1.1.0.62.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26911<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d6200_firmware<\/td>\nCertain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, and WNR2020 before 1.1.0.62.<\/td>\n2020-10-09<\/td>\n6.8<\/a><\/td>\nCVE-2020-26912<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- ex7700_firmware<\/td>\nNETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings.<\/td>\n2020-10-09<\/td>\n5.5<\/a><\/td>\nCVE-2020-26930<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- gs110emx_firmware<\/td>\nCertain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3, and XS724EM before 1.0.1.3.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26921<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- r6230_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100.<\/td>\n2020-10-09<\/td>\n5.2<\/a><\/td>\nCVE-2020-26929<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- srk60_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.<\/td>\n2020-10-09<\/td>\n5.8<\/a><\/td>\nCVE-2020-26920<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- wc7500_firmware<\/td>\nCertain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.<\/td>\n2020-10-09<\/td>\n4.6<\/a><\/td>\nCVE-2020-26922<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
onwebchat -- live_chat_-_live_support<\/td>\nCross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.<\/td>\n2020-10-15<\/td>\n6.8<\/a><\/td>\nCVE-2020-5642<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
webmin -- webmin<\/td>\nXSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module \/ mailboxes Endpoint when attempting to save HTML emails. This module parses any output without sanitizing SCRIPT elements, as opposed to the View function, which sanitizes the input correctly. A malicious user can send any JavaScript payload into the message body and execute it if the user decides to save that email.<\/td>\n2020-10-12<\/td>\n4.3<\/a><\/td>\nCVE-2020-12670<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Low Vulnerabilities<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Primary
\nVendor -- Product<\/strong><\/td>\n		Description<\/strong><\/td>\nPublished<\/strong><\/td>\nCVSS Score<\/strong><\/td>\nSource & Patch Info<\/strong><\/td>\n<\/tr>\n<\/thead>\n
google -- android<\/td>\nIn setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269<\/td>\n2020-10-14<\/td>\n2.1<\/a><\/td>\nCVE-2020-0410<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795<\/td>\n2020-10-14<\/td>\n2.1<\/a><\/td>\nCVE-2020-0415<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338<\/td>\n2020-10-14<\/td>\n2.1<\/a><\/td>\nCVE-2020-0419<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556<\/td>\n2020-10-14<\/td>\n2.1<\/a><\/td>\nCVE-2020-0422<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416<\/td>\n2020-10-14<\/td>\n2.1<\/a><\/td>\nCVE-2020-0412<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- hirouter-cd30-10_firmware<\/td>\nSome Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.<\/td>\n2020-10-12<\/td>\n3.3<\/a><\/td>\nCVE-2020-9122<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- p30_pro_firmware<\/td>\nHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure.<\/td>\n2020-10-12<\/td>\n2.1<\/a><\/td>\nCVE-2020-9106<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- taurus-al00a_firmware<\/td>\nTaurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak.<\/td>\n2020-10-12<\/td>\n2.1<\/a><\/td>\nCVE-2020-9087<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- taurus-an00b_firmware<\/td>\nTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.<\/td>\n2020-10-12<\/td>\n3.3<\/a><\/td>\nCVE-2020-9238<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- taurus-an00b_firmware<\/td>\nTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.<\/td>\n2020-10-12<\/td>\n2.1<\/a><\/td>\nCVE-2020-9240<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- taurus-an00b_firmware<\/td>\nTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario, the attacker can gain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.<\/td>\n2020-10-12<\/td>\n2.1<\/a><\/td>\nCVE-2020-9110<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- taurus-an00b_firmware<\/td>\nTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.<\/td>\n2020-10-12<\/td>\n2.1<\/a><\/td>\nCVE-2020-9091<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- ws5800-10_firmware<\/td>\nWS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become abnormal.<\/td>\n2020-10-12<\/td>\n3.3<\/a><\/td>\nCVE-2020-9230<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nA cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-4775<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- infosphere_information_server<\/td>\nIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188197.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-4741<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium<\/td>\nIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-4679<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium<\/td>\nIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-4681<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium<\/td>\nIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-4680<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26905<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26904<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26903<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26900<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- cbr40_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26899<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- d7800_firmware<\/td>\nCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.<\/td>\n2020-10-09<\/td>\n3.5<\/a><\/td>\nCVE-2020-26915<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- ex7000_firmware<\/td>\nCertain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128.<\/td>\n2020-10-09<\/td>\n3.5<\/a><\/td>\nCVE-2020-26917<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- gs808e_firmware<\/td>\nNETGEAR GS808E devices before 1.7.1.0 are affected by denial of service.<\/td>\n2020-10-09<\/td>\n2.1<\/a><\/td>\nCVE-2020-26925<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- rbk752_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26901<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- wc7500_firmware<\/td>\nCertain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.<\/td>\n2020-10-09<\/td>\n3.3<\/a><\/td>\nCVE-2020-26931<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- wc7500_firmware<\/td>\nCertain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.<\/td>\n2020-10-09<\/td>\n3.5<\/a><\/td>\nCVE-2020-26923<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
webmin -- webmin<\/td>\nAn Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-8821<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
webmin -- webmin<\/td>\nAn XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.<\/td>\n2020-10-12<\/td>\n3.5<\/a><\/td>\nCVE-2020-8820<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Severity Not Yet Assigned<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Primary
\nVendor -- Product<\/strong><\/td>\n		Description<\/strong><\/td>\nPublished<\/strong><\/td>\nCVSS Score<\/strong><\/td>\nSource & Patch Info<\/strong><\/td>\n<\/tr>\n<\/thead>\n
adobe -- flash_player<\/td>\nAdobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS\/SSL.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-9746<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
adobe -- magento<\/td>\nMagento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-24408<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
amazon -- aws_firecracker<\/td>\nIn Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly occupying more memory than intended on the host.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27174<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
amd -- multiple_graphics_drivers<\/td>\nA denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-12933<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
amd -- multiple_graphics_drivers<\/td>\nA denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTCreateAllocation API request can cause an out-of-bounds read and denial of service (BSOD). This vulnerability can be triggered from a non-privileged account.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-12911<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
amd -- ryzen_master<\/td>\nA vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-12928<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
anuko -- time_tracker<\/td>\nIn Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value starts with an equal sign). This is fixed in version 1.19.23.5325.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15255<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
apache -- solr<\/td>\nApache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication\/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD\/CREATE actions.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-13957<\/a>
\nMLIST<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apache -- tomcat<\/td>\nIf an HTTP\/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP\/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP\/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-13943<\/a>
\nMISC<\/a>
\nMLIST<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
apereo -- cas<\/td>\nApereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret keys with Google Authenticator for multifactor authentication.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27178<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- ios_and_ipados<\/td>\nAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14.0. An application may be able to cause unexpected system termination or write kernel memory.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9958<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- ios_and_ipados<\/td>\nThis issue was addressed with improved checks. This issue is fixed in iOS 13.6 and iPadOS 13.6. A remote attacker may be able to cause a denial of service.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9917<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- ios_and_ipados<\/td>\nA memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9964<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- ios_and_ipados<\/td>\nA denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6. A remote attacker may cause an unexpected application termination.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9931<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- ios_and_ipados<\/td>\nA lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9959<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- macos_catalina<\/td>\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9799<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- macos_catalina<\/td>\nA logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9864<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- macos_catalina<\/td>\nThis issue was addressed with improved data protection. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to leak sensitive user information.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9913<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9878<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn issue existed in the handling of iMessage tapbacks. The issue was resolved with additional verification. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A user that is removed from an iMessage group could rejoin the group.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9885<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed Bluetooth packets.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9914<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9893<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break out of its sandbox.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9865<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9888<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nThis issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9992<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9934<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nMultiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9910<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9909<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9895<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9915<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, watchOS 6.2.8. A malicious application may be able to execute arbitrary code with system privileges.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9923<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9933<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9952<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9925<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9918<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9903<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a URL from Web Inspector may lead to command injection.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9862<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9907<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker may be able to conceal the destination of a URL.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9916<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nThis issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9946<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9884<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9936<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9870<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user information.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9976<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. An issue in Safari Reader mode may allow a remote attacker to bypass the Same Origin Policy.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9911<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9894<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nA logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, watchOS 7.0. A malicious application may be able to access restricted files.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9968<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9889<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9890<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- multiple_products<\/td>\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9891<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- safari<\/td>\nAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9983<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- safari<\/td>\nA type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9948<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- safari<\/td>\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9951<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
apple -- safari<\/td>\nA logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.2. A malicious attacker may be able to change the origin of a frame for a download in Safari Reader mode.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-9912<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
aptean -- product_configurator<\/td>\nAn issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page (aka cse?cmd=LOGIN). This can be exploited directly, and remotely.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26944<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
arc_informatique --\u00a0 pcvue<\/td>\nA Denial Of Service vulnerability exists in PcVue from version 8.10 onward, due to the ability for a non-authorized user to modify information used to validate messages sent by legitimate web clients.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-26868<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
arc_informatique --\u00a0 pcvue<\/td>\nA Remote Code Execution vulnerability exists in PcVue from version 8.10 onward, due to the unsafe deserialization of messages received on the interface.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-26867<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
arc_informatique --\u00a0 pcvue<\/td>\nAn information exposure vulnerability exists in PcVue 12, allowing a non-authorized user to access session data of legitimate users.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-26869<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
atlassian -- jira_server<\/td>\nAffected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9, from version 8.6.0 before 8.12.3, and from version 8.13.0 before 8.13.1.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-14184<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
atlassian -- jira_server<\/td>\nAffected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActionsAndOperations resource. The affected versions are before 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before version 8.12.2.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-14185<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- automation_runtime<\/td>\nA memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11637<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- gatemanager_4260_and_9250<\/td>\nA log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log information reserved for other users.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11646<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- gatemanager_4260_and_9250<\/td>\nAn information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11643<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- gatemanager_4260_and_9250_and_8250<\/td>\nA denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager instances.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11645<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- gatemanager_4260_and_9250_and_8250<\/td>\nThe information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to generate fake audit log messages.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11644<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- sitemanager<\/td>\nThe local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11642<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
b&r -- sitemanager<\/td>\nA local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-11641<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bass -- audio_library<\/td>\nThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-18796<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bass -- audio_library<\/td>\nThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-18794<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bass -- audio_library<\/td>\nThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-18795<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bass -- audio_library<\/td>\nThe BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-19513<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bender -- comtraxx<\/td>\nIn Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-19885<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
blackberry -- uem_core<\/td>\nAn improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-6933<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
bluez -- bluez<\/td>\nIn BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared\/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-27153<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
canimaan_software -- clamxav<\/td>\nAn issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (running with an injected malicious dylib) to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the helper tool.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26893<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
cisco -- duo_authentication<\/td>\nA privilege escalation vulnerability exists in the Duo Authentication for Windows Logon and RDP implementation. This vulnerability could allow an authenticated local attacker to overwrite files in privileged directories.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-3427<\/a>
\nCISCO<\/a><\/td>\n<\/tr>\n
cisco -- duo_network_gateway<\/td>\nDuo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted in certificate and private key information being written out in plain-text to local files on the DNG host. Any private keys logged in this way could be viewed by those with access to the DNG host operating system without any need for reversing encrypted values or similar techniques. An attacker that gained access to the DNG logs and with the ability to intercept and manipulate network traffic between a user and the DNG, could decrypt and manipulate SSL\/TLS connections to the DNG and to the protected applications behind it. Duo Network Gateway (DNG) versions 1.3.3 through 1.5.7 are affected.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-3483<\/a>
\nCISCO<\/a><\/td>\n<\/tr>\n
containerd -- containerd<\/td>\nIn containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer (otherwise known as a \u201cforeign layer\u201d), the default containerd resolver will follow that URL to attempt to download it. In v1.2.x but not 1.3.0 or later, the default containerd resolver will provide its authentication credentials if the server where the URL is located presents an HTTP 401 status code along with registry-specific HTTP headers. If an attacker publishes a public image with a manifest that directs one of the layers to be fetched from a web server they control and they trick a user or system into pulling the image, they can obtain the credentials used for pulling that image. In some cases, this may be the user's username and password for the registry. In other cases, this may be the credentials attached to the cloud virtual instance which can grant access to other cloud resources in the account. The default containerd resolver is used by the cri-containerd plugin (which can be used by Kubernetes), the ctr development tool, and other client programs that have explicitly linked against it. This vulnerability has been fixed in containerd 1.2.14. containerd 1.3 and later are not affected. If you are using containerd 1.3 or later, you are not affected. If you are using cri-containerd in the 1.2 series or prior, you should ensure you only pull images from trusted sources. Other container runtimes built on top of containerd but not using the default resolver (such as Docker) are not affected.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15157<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
crossbeam -- crossbeam<\/td>\nCrossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. This has been fixed in crossbeam-channel 0.4.4.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15254<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
dca -- vantage_analyzer<\/td>\nA vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-7590<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
dca -- vantage_analyzer<\/td>\nA vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Improper Access Control could allow an unauthenticated attacker to escape from the restricted environment (\u201ckiosk mode\u201d) and access the underlying operating system. Successful exploitation requires direct physical access to the system.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-15797<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
debian -- sympa<\/td>\ndebian\/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode 4750 (for access by the sympa group)<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nCVE-2020-26932<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
dell -- emc_networker<\/td>\nDell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remote user with low privileges may exploit this vulnerability to perform 'saveset' related operations in an unintended manner. The vulnerability is not exploitable by users authenticated via LDAP.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26182<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
dell -- emc_networker<\/td>\nDell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulnerability to perform 'nsrmmdbd' operations in an unintended manner.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26183<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
desigo -- insight<\/td>\nA vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show the absolute path to the requested resource. This could allow an authenticated attacker to retrieve additional information about the host system.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-15794<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
desigo -- insight<\/td>\nA vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-15792<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
desigo -- insight<\/td>\nA vulnerability has been identified in Desigo Insight (All versions). The device does not properly set the X-Frame-Options HTTP Header which makes it vulnerable to Clickjacking attacks. This could allow an unauthenticated attacker to retrieve or modify data in the context of a legitimate user by tricking that user to click on a website controlled by the attacker.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-15793<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
eclipse -- vert<\/td>\nIn Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the current working directory.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2019-17640<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
electron -- wire<\/td>\nIn Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the URL that is opened. The issue was patched by implementing a helper function which checks if the URL's protocol is common. If it is common, the URL will be opened externally. If not, the URL will not be opened and a warning appears for the user informing them that a probably insecure URL was blocked from being executed. The issue is patched in Wire 3.20.x. More technical details about exploitation are available in the linked advisory.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15258<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
emby -- emby_server<\/td>\nEmby Server before 4.5.0 allows SSRF via the Items\/RemoteSearch\/Image ImageURL parameter.<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nCVE-2020-26948<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
excast -- pro_ii<\/td>\nIn EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2019-12305<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
excellium -- helpdeskz<\/td>\n** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-26546<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
f2fs-tools -- f2fs-tools<\/td>\nAn exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6105<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
f2fs-tools -- f2fs-tools<\/td>\nAn exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6104<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
f2fs-tools -- f2fs-tools<\/td>\nAn exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6106<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
f2fs-tools -- f2fs-tools<\/td>\nAn exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6108<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
f2fs-tools -- f2fs-tools<\/td>\nAn exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6107<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
foxit -- reader<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11657.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-17417<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
foxit -- reader<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11497.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-17416<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
gitea -- gitea<\/td>\nThe git hook feature in Gitea 1.1.0 through 1.12.5 allows for authenticated remote code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-14144<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
gitlab -- gitlab<\/td>\nAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer role to perform various deletions.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-13341<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
gogs -- gogs<\/td>\nThe git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15867<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nIn binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N\/A<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-0423<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
google -- android<\/td>\nThis affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Docs links. 2. All apk downloads, either organic or not. Mintegral listens to download events in Android's download manager and detects if the downloaded file's url contains: a. google.com<\/a> or comes from a Google app (the com.android.vending package) b. Ends with .apk for apk downloads In both cases, the module sends the captured data back to Mintegral's servers. Note that the malicious functionality keeps running even if the app is currently not in focus (running in the background).<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-7744<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
grocy -- grocy<\/td>\nVersions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping locations, tasks, taskcategories, product groups, recipes and products. Authentication is required to exploit these issues and Grocy should not be publicly exposed. The linked reference details a proof-of-concept.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-15253<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
huawei -- mate_20_devices<\/td>\nThere is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful exploit could cause information disclosure.Affected product versions include:HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI Mate 20 X versions earlier than 10.1.0.160(C00E160R2P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8);Laya-AL00EP versions earlier than 10.1.0.160(C786E160R3P8);Tony-AL00B versions earlier than 10.1.0.160(C00E160R2P11);Tony-TL00B versions earlier than 10.1.0.160(C01E160R2P11).<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-9109<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
huawei -- p30_pro_devices<\/td>\nHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulnerability. An attacker induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining the root permission. Successful exploit may cause code execution.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-9123<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nAn improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4781<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nAn XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4774<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nA HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4779<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nA cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no impact to remainder of web application. IBM X-Force ID: 189151.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4773<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nOOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4780<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nAn XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4772<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nIBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the C\u00c3\u00baram application. IBM X-Force ID: 189156.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4778<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- curam_social_program_management<\/td>\nA path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted file path in URL request to view arbitrary files on the system. IBM X-Force ID: 189154.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4776<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- resilient_onprem<\/td>\nIBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-4636<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager<\/td>\nIBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-4395<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager_and_security_verify_access<\/td>\nIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4699<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager_and_security_verify_access<\/td>\nIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-4499<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager_and_security_verify_access<\/td>\nIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4661<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager_and_security_verify_access<\/td>\nIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-4660<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_access_manager_and_security_verify_access<\/td>\nIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 165960.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2019-4552<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
ibm -- security_guardium_big_data_intelligence<\/td>\nIBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-4254<\/a>
\nXF<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
iproom -- mmc+_server<\/td>\nIProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-24551<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
jfrog -- artifactory<\/td>\nJfrog Artifactory uses default passwords (such as \"password\") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2019-17444<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- ex2300_series_devices<\/td>\nOn Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load due to this issue, the administrator can issue the following command: user@host> show chassis routing-engine Routing Engine status: ... Idle 2 percent the \"Idle\" value shows as low (2 % in the example above), and also the following command: user@host> show system processes summary ... PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND 11639 root 52 0 283M 11296K select 12:15 44.97% eventd 11803 root 81 0 719M 239M RUN 251:12 31.98% fxpc{fxpc} the eventd and the fxpc processes might use higher WCPU percentage (respectively 44.97% and 31.98% in the above example). This issue affects Juniper Networks Junos OS on EX2300 Series: 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1668<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- ex4300_series_devices<\/td>\nOn Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is connected. This issue occurs when the packets enter to the IRB interface. Only IPv4 packets can trigger this issue. IPv6 packets cannot trigger this issue. This issue affects Juniper Networks Junos OS on EX4300 series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S4; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R2-S2, 19.1R3-S1; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2; 20.1 versions prior to 20.1R1-S3, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1670<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- ex4600_and_qfx_5000_series_devices<\/td>\nWhen configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching { filter L2-VLAN { term ALLOW { from { user-vlan-id 100; } then { accept; } } term NON-MATCH { then { discard; } } when there is only one term containing a 'user-vlan-id' match condition, and no other terms in the firewall filter except discard, the discard action for non-matching traffic will only discard traffic with the same VLAN ID specified under 'user-vlan-id'. Other traffic (e.g. VLAN ID 200) will not be discarded. This unexpected behavior can lead to unintended traffic passing through the interface where the firewall filter is applied. This issue only affects systems using VXLANs. This issue affects Juniper Networks Junos OS on QFX5K Series: 18.1 versions prior to 18.1R3-S7, except 18.1R3; 18.2 versions prior to 18.2R2-S7, 18.2R3-S1; 18.3 versions prior to 18.3R1-S5, 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R1-S7, 18.4R2-S1, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1685<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_mx_series_devices<\/td>\nWhen DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process might be bypassed due to a race condition. Due to this vulnerability, mspmand process, responsible for managing \"URL Filtering service\", can crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S8; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R3; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3. This issue does not affect Juniper Networks Junos OS 17.4, 18.1, and 18.2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1667<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nA stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Versions of Junos OS prior to 17.3 are unaffected by this vulnerability.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1664<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nInsufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP\/HTTPS) services allows an unauthenticated attacker to hijack the target user's HTTP\/HTTPS session and perform administrative actions on the Junos device as the targeted user. This issue only affects Juniper Networks Junos OS devices with HTTP\/HTTPS services enabled such as J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP). Junos OS devices with HTTP\/HTTPS services disabled are not affected. If HTTP\/HTTPS services are enabled, the following command will show the httpd processes: user@device> show system processes | match http 5260 - S 0:00.13 \/usr\/sbin\/httpd-gk -N 5797 - I 0:00.10 \/usr\/sbin\/httpd --config \/jail\/var\/etc\/httpd.conf In order to successfully exploit this vulnerability, the attacker needs to convince the device administrator to take action such as clicking the crafted URL sent via phishing email or convince the administrator to input data in the browser console. This issue affects Juniper Networks Junos OS: 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S2; 19.1 versions prior to 19.1R2-S2, 19.1R3-S1; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2; 20.1 versions prior to 20.1R1-S2, 20.1R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1673<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nJuniper Networks Junos OS and Junos OS Evolved fail to drop\/discard delayed MACsec packets (e.g. delayed by more than 2 seconds). Per the specification, called the \"bounded receive delay\", there should be no replies to delayed MACsec packets. Any MACsec traffic delayed more than 2 seconds should be dropped and late drop counters should increment. Without MACsec delay protection, an attacker could exploit the delay to spoof or decrypt packets. This issue affects: Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8, 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R1-S7, 18.4R2-S5, 18.4R3-S3; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2. Juniper Networks Junos OS Evolved: all versions prior to 19.4R3-EVO; 20.1 versions prior to 20.1R2-EVO. This issue does not affect Junos OS versions prior to 16.1R1.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1674<\/a>
\nMISC<\/a>
\nCONFIRM<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nOn Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon (jdhcp) process might crash when receiving a malformed DHCP packet. This issue only affects devices configured as DHCP forwarder with forward-only option, that forward specified DHCP client packets, without creating a new subscriber session. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of the malformed DHCP packet will repeatedly crash jdhcpd, leading to an extended Denial of Service (DoS) condition. This issue can be triggered only by DHCPv4, it cannot be triggered by DHCPv6. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S16; 12.3X48 versions prior to 12.3X48-D105 on SRX Series; 14.1X53 versions prior to 14.1X53-D60 on EX and QFX Series; 15.1 versions prior to 15.1R7-S7; 15.1X49 versions prior to 15.1X49-D221, 15.1X49-D230 on SRX Series; 15.1X53 versions prior to 15.1X53-D593 on EX2300\/EX3400; 16.1 versions prior to 16.1R7-S5.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1661<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nOn Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd, leading to an extended Denial of Service (DoS) condition. Only DHCPv6 packet can trigger this issue. DHCPv4 packet cannot trigger this issue. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1672<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nThe DHCPv6 Relay-Agent service, part of the Juniper Enhanced jdhcpd daemon shipped with Juniper Networks Junos OS has an Improper Input Validation vulnerability which will result in a Denial of Service (DoS) condition when a DHCPv6 client sends a specific DHPCv6 message allowing an attacker to potentially perform a Remote Code Execution (RCE) attack on the target device. Continuous receipt of the specific DHCPv6 client message will result in an extended Denial of Service (DoS) condition. If adjacent devices are also configured to relay DHCP packets, and are not affected by this issue and simply transparently forward unprocessed client DHCPv6 messages, then the attack vector can be a Network-based attack, instead of an Adjacent-device attack. No other DHCP services are affected. Receipt of the packet without configuration of the DHCPv6 Relay-Agent service, will not result in exploitability of this issue. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S15; 12.3X48 versions prior to 12.3X48-D95; 14.1X53 versions prior to 14.1X53-D53; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D200; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S7; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R3-S3; 17.2X75 versions prior to 17.2X75-D44; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R2-S6, 18.2R3-S2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D435, 18.2X75-D60; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S3, 19.2R2; 19.3 versions prior to 19.3R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1656<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os<\/td>\nOn Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash with a core dump if a malformed DHCPv6 packet is received, resulting with the restart of the daemon. This issue only affects DHCPv6, it does not affect DHCPv4. This issue affects: Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.2 version 19.2R2 and later versions; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2; This issue does not affect Juniper Networks Junos OS prior to 17.4R1.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1671<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_and_junos_os_evolved<\/td>\nOn Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the \"show task memory detail | match policy | match evpn\" command multiple times to check if memory (Alloc Blocks value) is increasing. root@device> show task memory detail | match policy | match evpn ------------------------ Allocator Memory Report ------------------------ Name | Size | Alloc DTXP Size | Alloc Blocks | Alloc Bytes | MaxAlloc Blocks | MaxAlloc Bytes Policy EVPN Params 20 24 3330678 79936272 3330678 79936272 root@device> show task memory detail | match policy | match evpn ------------------------ Allocator Memory Report ------------------------ Name | Size | Alloc DTXP Size | Alloc Blocks | Alloc Bytes | MaxAlloc Blocks | MaxAlloc Bytes Policy EVPN Params 20 24 36620255 878886120 36620255 878886120 This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R2; 20.1 versions prior to 20.1R1-S4, 20.1R2; Juniper Networks Junos OS Evolved: 19.4 versions; 20.1 versions prior to 20.1R1-S4-EVO, 20.1R2-EVO; 20.2 versions prior to 20.2R1-EVO; This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper Networks Junos OS Evolved releases prior to 19.4R1-EVO.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1678<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_and_junos_os_evolved_devices<\/td>\nOn Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon (RPD) crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration. When the issue occurs the following messages will appear in the \/var\/log\/messages: rpd[6046]: %DAEMON-4-BGP_PREFIX_THRESH_EXCEEDED: XXXX (External AS x): Configured maximum accepted prefix-limit threshold(1800) exceeded for inet6-unicast nlri: 1984 (instance master) rpd[6046]: %DAEMON-3-BGP_CEASE_PREFIX_LIMIT_EXCEEDED: 2001:x:x:x::2 (External AS x): Shutting down peer due to exceeding configured maximum accepted prefix-limit(2000) for inet6-unicast nlri: 2001 (instance master) rpd[6046]: %DAEMON-4: bgp_rt_maxprefixes_check_common:9284: NOTIFICATION sent to 2001:x:x:x::2 (External AS x): code 6 (Cease) subcode 1 (Maximum Number of Prefixes Reached) AFI: 2 SAFI: 1 prefix limit 2000 kernel: %KERN-5: mastership_relinquish_on_process_exit: RPD crashed on master RE. Sending SIGUSR2 to chassisd (5612:chassisd) to trigger RE switchover This issue affects: Juniper Networks Junos OS: 17.2R3-S3; 17.3 version 17.3R3-S3 and later versions, prior to 17.3R3-S8; 17.4 version 17.4R2-S4, 17.4R3 and later versions, prior to 17.4R2-S10, 17.4R3-S2; 18.1 version 18.1R3-S6 and later versions, prior to 18.1R3-S10; 18.2 version 18.2R3 and later versions, prior to 18.2R3-S4; 18.2X75 version 18.2X75-D50, 18.2X75-D60 and later versions, prior to 18.2X75-D53, 18.2X75-D65; 18.3 version 18.3R2 and later versions, prior to 18.3R2-S4, 18.3R3-S2; 18.4 version 18.4R2 and later versions, prior to 18.4R2-S5, 18.4R3-S2; 19.1 version 19.1R1 and later versions, prior to 19.1R2-S2, 19.1R3-S1; 19.2 version 19.2R1 and later versions, prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2; 20.1 versions prior to 20.1R1-S2, 20.1R2. Juniper Networks Junos OS Evolved prior to 20.1R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 17.2R3-S3.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1662<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_devices<\/td>\nOn Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigged by a malformed IPv6 packet destined to the Routing Engine or a transit packet that is sampled using sFlow\/jFlow or processed by firewall filter with the syslog and\/or log action. An attacker can repeatedly send the offending packet resulting in an extended Denial of Service condition. Only IPv6 packets can trigger this issue. IPv4 packets cannot trigger this issue. This issue affects Juniper Networks Junos OS 18.4 versions prior to 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2. This issue does not affect Juniper Networks Junos OS prior to 18.4R1.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1686<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_devices<\/td>\nOn Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore). Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of the following command to check if there is memory leak caused by this issue: user@device> show system virtual-memory | match \"pfe_ipc|kmem\" pfe_ipc 147 5K - 164352 16,32,64,8192 <-- increasing vm.kmem_map_free: 127246336 <-- decreasing pfe_ipc 0 0K - 18598 32,8192 vm.kmem_map_free: 134582272 This issue affects Juniper Networks Junos OS: 17.4R3; 18.1 version 18.1R3-S5 and later versions prior to 18.1R3-S10; 18.2 version 18.2R3 and later versions prior to 18.2R3-S3; 18.2X75 version 18.2X75-D420, 18.2X75-D50 and later versions prior to 18.2X75-D430, 18.2X75-D53, 18.2X75-D60; 18.3 version 18.3R3 and later versions prior to 18.3R3-S2; 18.4 version 18.4R1-S4, 18.4R2 and later versions prior to 18.4R2-S5, 18.4R3-S1; 19.1 version 19.1R2 and later versions prior to 19.1R2-S2, 19.1R3; 19.2 version 19.2R1 and later versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2. This issue does not affect Juniper Networks Junos OS prior to 17.4R3.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1683<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_evolved<\/td>\nThe system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactive session and possibly gain administrative privileges. This issue affects all Juniper Networks Junos OS Evolved versions after 18.4R1-EVO, prior to 20.2R1-EVO.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1666<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- junos_os_evolved<\/td>\nReceipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp process to crash, resulting in a Denial of Service (DoS). The process automatically restarts without intervention, but a continuous receipt of the malformed NDP packets could leaded to an extended Denial of Service condition. During this time, IPv6 neighbor learning will be affected. The issue occurs when parsing the incoming malformed NDP packet. Rather than simply discarding the packet, the process asserts, performing a controlled exit and restart, thereby avoiding any chance of an unhandled exception. Exploitation of this vulnerability is limited to a temporary denial of service, and cannot be leveraged to cause additional impact on the system. This issue is limited to the processing of IPv6 NDP packets. IPv4 packet processing cannot trigger, and is unaffected by this vulnerability. This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO. Junos OS is unaffected by this vulnerability.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1681<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- mist_cloud_ui<\/td>\nWhen SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1676<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- multiple_junos_os_devices<\/td>\nOn Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffic interruption. This issue affects devices that are configured as a Layer 2 or Layer 3 gateway of an EVPN-VXLAN deployment. The offending layer 2 frames that cause the issue originate from a different access switch that get encapsulated within the same EVPN-VXLAN domain. This issue affects Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1687<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- multiple_junos_os_devices<\/td>\nOn Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific layer 2 frames can cause high CPU load, which could lead to traffic interruption. This issue does not occur when the device is deployed in Stand Alone configuration. The offending layer 2 frame packets can originate only from within the broadcast domain where the device is connected. This issue affects Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1689<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- multiple_junos_os_devices<\/td>\nAn input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead to an extended Denial of Service condition. This issue only affects the SRX1500, SRX4100, SRX4200, NFX150, and vSRX-based platforms. No other products or platforms are affected by this vulnerability. This issue affects the following versions of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200, vSRX, NFX150: 15.1X49 versions prior to 15.1X49-D220; 17.4 versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3. This issue does not affect Junos OS 19.3 or any subsequent version.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1682<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- mx_series_and_ex9200_series_devices<\/td>\nOn Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting both the Routing Engine (RE) and the Flexible PIC Concentrator (FPC) during the DDoS attack. When this issue occurs, the RE and\/or the FPC can become overwhelmed, which could disrupt network protocol operations and\/or interrupt traffic. This issue does not affect IPv4 DDoS protection. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines). Please refer to https:\/\/kb.juniper.net\/KB25385<\/a> for the list of Trio-based PFEs. This issue affects Juniper Networks Junos OS on MX series and EX9200 Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.2 versions prior to 18.2R2-S7, 18.2R3, 18.2R3-S3; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1665<\/a>
\nCONFIRM<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- mx_series_devices<\/td>\nOn Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition. This issue affects Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S7; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1680<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- mx_series_devices<\/td>\nWhen DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing \"URL Filtering service\", may crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process. This vulnerability might allow an attacker to cause an extended Denial of Service (DoS) attack against the device and to cause clients to be vulnerable to DNS based attacks by malicious DNS servers when they send DNS requests through the device. As a result, devices which were once protected by the DNS Filtering service are no longer protected and at risk of exploitation. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S8; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R3; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3. This issue does not affect Juniper Networks Junos OS 17.4, 18.1, and 18.2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1660<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- nfx350_devices<\/td>\nThe Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file \/etc\/passwd. This is not a security best current practice as it can allow an attacker with access to the local filesystem the ability to brute-force decrypt password hashes stored on the system. This issue affects Juniper Networks Junos OS on NFX350: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1669<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- ptx\/qfx_series_devices<\/td>\nOn Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table (KRT) queue to become stuck. KRT is the module within the Routing Process Daemon (RPD) that synchronized the routing tables with the forwarding tables in the kernel. This table is then synchronized to the Packet Forwarding Engine (PFE) via the KRT queue. Thus, when KRT queue become stuck, it can lead to unexpected packet forwarding issues. An administrator can monitor the following command to check if there is the KRT queue is stuck: user@device > show krt state ... Number of async queue entries: 65007 <--- this value keep on increasing. When this issue occurs, the following message might appear in the \/var\/log\/messages: DATE DEVICE kernel: %KERN-3: rt_pfe_veto: Too many delayed route\/nexthop unrefs. Op 2 err 55, rtsm_id 5:-1, msg type 2 DATE DEVICE kernel: %KERN-3: rt_pfe_veto: Memory usage of M_RTNEXTHOP type = (0) Max size possible for M_RTNEXTHOP type = (7297134592) Current delayed unref = (60000), Current unique delayed unref = (18420), Max delayed unref on this platform = (40000) Current delayed weight unref = (60000) Max delayed weight unref on this platform= (400000) curproc = rpd This issue affects Juniper Networks Junos OS on PTX\/QFX Series: 17.2X75 versions prior to 17.2X75-D105; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.2X75 versions prior to 18.2X75-D420, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R1-S7, 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1679<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- srx_series_and_nfx_series_devices<\/td>\nOn Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an attacker to decrypt the communications between the Juniper device and the authenticator service. This Web API service is used for authentication services such as the Juniper Identity Management Service, used to obtain user identity for Integrated User Firewall feature, or the integrated ClearPass authentication and enforcement feature. This issue affects Juniper Networks Junos OS on Networks SRX Series and NFX Series: 12.3X48 versions prior to 12.3X48-D105; 15.1X49 versions prior to 15.1X49-D190; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R1-S7, 18.4R2; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S4, 19.2R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1688<\/a>
\nMISC<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
juniper_networks -- srx_series_devices<\/td>\nOn SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association (SA) is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these spoofed packets can cause a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 implementations. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S6, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2. This issue does not affect 12.3 or 15.1 releases which are non-SRX Series releases.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1657<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
juniper_networks -- srx_series_devices<\/td>\nOn Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when Intrusion Detection and Prevention (IDP), AppFW, AppQoS, or AppTrack is configured. Thus, this issue might occur when IDP, AppFW, AppQoS, or AppTrack is configured. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D105; 15.1X49 versions prior to 15.1X49-D221, 15.1X49-D230; 17.4 versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S1; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1684<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
junit -- junit4<\/td>\nIn JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. This vulnerability impacts you if the JUnit tests write sensitive information, like API keys or passwords, into the temporary folder, and the JUnit tests execute in an environment where the OS has other untrusted users. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. For Java 1.7 and higher users: this vulnerability is fixed in 4.13.1. For Java 1.6 and lower users: no patch is available, you must use the workaround below. If you are unable to patch, or are stuck running on Java 1.6, specifying the `java.io.tmpdir` system environment variable to a directory that is exclusively owned by the executing user will fix this vulnerability. For more information, including an example of vulnerable code, see the referenced GitHub Security Advisory.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-15250<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a>
\nMLIST<\/a><\/td>\n<\/tr>\n
lcds -- laquis_scada<\/td>\nAn attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA (Versions prior to 4.3.1.870).<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-25188<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
lenovo -- cloud_networking_operating_system<\/td>\nAn internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS)\u2019 optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where attached to a VRF and as allowed by defined ACLs. Lenovo strongly recommends upgrading to a non-vulnerable CNOS release. Where not possible, Lenovo recommends disabling the REST API management interface or restricting access to the management VRF and further limiting access to authorized management stations via ACL.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-8349<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
lenovo -- hardwarescan_plugin<\/td>\nA DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-8345<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
lenovo -- multiple_devices<\/td>\nA potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-8332<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
lenovo -- thinkpad_stack_wireless_router<\/td>\nAn authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-8350<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
libarchive -- libarchive<\/td>\nHeap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-21674<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
libass -- libass<\/td>\nIn libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26682<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
linux -- linux_kernel<\/td>\nAn issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel\/bpf\/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27194<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
mark_text -- mark_text<\/td>\nMutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the \"source code mode\" feature, which parses HTML even though HTML support is not one of the primary advertised roles of the product.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27176<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
mcafee -- active_response<\/td>\nImproperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-7326<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
mcafee -- application_and_change_control<\/td>\nImproper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation\/uninstallation of software.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-7334<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
mcafee -- epolicy_orchistrator<\/td>\nCross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for \"syncPointList\" not being correctly sanitsed.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-7318<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
mcafee -- epolicy_orchistrator<\/td>\nCross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for \"syncPointList\" not being correctly sanitsed.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-7317<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
mcafee -- mvision_endpoint_detection_and_response_client<\/td>\nImproperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing open rather than closed<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-7327<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
mcafee -- total_protection<\/td>\nPrivilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-7330<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
microhard -- bullet-lte<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of authentication headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10596.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-17407<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
microhard -- bullet-lte<\/td>\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ping parameter provided to tools.sh. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10595.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-17406<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
microsoft -- .net_framework<\/td>\nAn information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory, aka '.NET Framework Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16937<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- 3d_viewer<\/td>\nA remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory., aka 'Base3D Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16918.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-17003<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- 3d_viewer_and_365_apps_for_enterprise<\/td>\nA remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory., aka 'Base3D Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-17003.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16918<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- azure_functions<\/td>\nAn elevation of privilege vulnerability exists in the way Azure Functions validate access keys.An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions., aka 'Azure Functions Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16904<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- dynamics_365<\/td>\nA cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-16956.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16978<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- dynamics_365<\/td>\nAn elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce, aka 'Dynamics 365 Commerce Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16943<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- dynamics_365<\/td>\nA cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-16978.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16956<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- excel<\/td>\nA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16929, CVE-2020-16931, CVE-2020-16932.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16930<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- excel<\/td>\nA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16929, CVE-2020-16930, CVE-2020-16932.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16931<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- excel<\/td>\nA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16929, CVE-2020-16930, CVE-2020-16931.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16932<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- excel<\/td>\nA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16930, CVE-2020-16931, CVE-2020-16932.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16929<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- exchange<\/td>\nAn information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages, aka 'Microsoft Exchange Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16969<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- network_watcher_agent<\/td>\nAn elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux, aka 'Network Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16995<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- office<\/td>\nAn elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files, aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16934, CVE-2020-16955.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16928<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- office<\/td>\nAn elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files, aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16928, CVE-2020-16955.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16934<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- office<\/td>\nAn elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files, aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16928, CVE-2020-16934.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16955<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- office<\/td>\nA remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16954<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- office_access_connectivity_engine<\/td>\nA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16957<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- outlook<\/td>\nA remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16947<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- outlook<\/td>\nA denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory, aka 'Microsoft Outlook Denial of Service Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16949<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- powershellget<\/td>\nA security feature bypass vulnerability exists in the PowerShellGet V2 module, aka 'PowerShellGet Module WDAC Security Feature Bypass Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16886<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nAn information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16941, CVE-2020-16942, CVE-2020-16948, CVE-2020-16953.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16950<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-16946.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16945<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16952.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16951<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nAn information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16941, CVE-2020-16942, CVE-2020-16950, CVE-2020-16953.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16948<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-16945.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16946<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nAn information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16941, CVE-2020-16942, CVE-2020-16948, CVE-2020-16950.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16953<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nThis vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16944<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nAn information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16941, CVE-2020-16948, CVE-2020-16950, CVE-2020-16953.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16942<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nAn information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16942, CVE-2020-16948, CVE-2020-16950, CVE-2020-16953.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16941<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- sharepoint_server<\/td>\nA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16951.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16952<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- visual_studio_code<\/td>\nA remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file, aka 'Visual Studio JSON Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-17023<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows<\/td>\nAn elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points, aka 'Windows Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16877<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16915<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16896<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16924<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16916.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16935<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16923.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1167<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations, aka 'Windows Application Compatibility Client Library Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16876.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16920<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16975, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16974<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16890<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16913.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16907<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16895<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points, aka 'Windows - User Profile Service Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16940<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA denial of service vulnerability exists when the Windows TCP\/IP stack improperly handles ICMPv6 Router Advertisement packets, aka 'Windows TCP\/IP Denial of Service Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16899<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1243<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when Windows Network Address Translation (NAT) fails to properly handle UDP traffic, aka 'Windows NAT Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16894<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory.An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.The security update addresses the vulnerability by ensuring the Windows kernel image properly handles objects in memory., aka 'Windows Image Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16892<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16891<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16938.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16901<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1167.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16923<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory, aka 'Windows KernelStream Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16889<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16902<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-0764<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1080.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1047<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16887<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations, aka 'Windows Storage VSP Driver Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16885<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1047.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1080<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event System Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16900<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when the Windows TCP\/IP stack improperly handles ICMPv6 Router Advertisement packets, aka 'Windows TCP\/IP Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16898<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16973<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16909.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16905<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA spoofing vulnerability exists when Windows incorrectly validates file signatures, aka 'Windows Spoofing Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16922<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16907.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16913<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16936<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16972<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16939<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in Windows Setup in the way it handles directories.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Setup Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16908<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16905.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16909<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface (UEFI) location.To exploit this vulnerability, an attacker could run a specially crafted application to bypass Unified Extensible Firmware Interface (UEFI) variable security in Windows.The security update addresses the vulnerability by correcting security feature behavior to enforce permissions., aka 'Windows Security Feature Bypass Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16910<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16911<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16912<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16901.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16938<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI+ Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16914<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16976.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16975<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory, aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16968.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16967<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16927<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16935.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16916<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations, aka 'Windows Enterprise App Management Service Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16919<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nA remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory, aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16967.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16968<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory, aka 'Windows Text Services Framework Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16921<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_10<\/td>\nAn elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16976<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_codecs_library<\/td>\nA remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-17022<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- windows_server<\/td>\nAn elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16980<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
microsoft -- word<\/td>\nA security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files, aka 'Microsoft Word Security Feature Bypass Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16933<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
monero -- monero_wallet_gui<\/td>\nmonero-wallet-gui in Monero GUI 0.17.0.1 includes the . directory in an embedded RPATH (with a preference ahead of \/usr\/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nCVE-2020-26947<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
mybatis -- mybatis<\/td>\nMyBatis before 3.5.6 mishandles deserialization of object streams.<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netbios -- netbios<\/td>\nAn information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory, aka 'NetBT Information Disclosure Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16897<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
netgear -- multiple_routers<\/td>\nThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10754.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-17409<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
octopus -- octopus_deploy<\/td>\nIn Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-25825<\/a>
\nCONFIRM<\/a>
\nCONFIRM<\/a>
\nCONFIRM<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
olimpoks -- olimpoks<\/td>\nOLIMPOKS before 5.1.0 allows Auth\/Admin ErrorMessage XSS.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16270<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
open_enclave -- open_enclave<\/td>\nIn Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the enclave heap across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information otherwise considered confidential in an enclave, which could be used in further compromises. The issue has been addressed in version 0.12.0 and the current master branch. Users will need to to recompile their applications against the patched libraries to be protected from this vulnerability.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-15224<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
openstack -- blazer_dashboard<\/td>\nAn issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under (because the Python eval function is used). This may result in Horizon host unauthorized access and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26943<\/a>
\nMLIST<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
opensuse -- powerdns_recursor<\/td>\nAn issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This results in a denial of service for installation that always validate (dnssec=validate), and for clients requesting validation when on-demand validation is enabled (dnssec=process).<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-25829<\/a>
\nSUSE<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
otrs -- open_ticket_request_system<\/td>\nAgent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-1777<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
overwolf -- overwolf_client<\/td>\nIn the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-25214<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
pepperl_+_fuchs -- comtrol_rocketlinx<\/td>\nImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528\/ES9528-XT (all versions) and ICRL-M-8RJ45\/4SFP-G-DIN, ICRL-M-16RJ45\/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-12502<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
pepperl_+_fuchs -- comtrol_rocketlinx<\/td>\nImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528\/ES9528-XT (all versions) use undocumented accounts.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-12501<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
pepperl_+_fuchs -- comtrol_rocketlinx<\/td>\nImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528\/ES9528-XT (all versions) and ICRL-M-8RJ45\/4SFP-G-DIN, ICRL-M-16RJ45\/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-12503<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
pepperl_+_fuchs -- comtrol_rocketlinx<\/td>\nImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528\/ES9528-XT (all versions) allows unauthenticated device administration.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-12500<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
pepperl_+_fuchs -- comtrol_rocketlinx<\/td>\nImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528\/ES9528-XT (all versions) and ICRL-M-8RJ45\/4SFP-G-DIN, ICRL-M-16RJ45\/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-12504<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
phpmyadmin -- phpmyadmin<\/td>\nAn issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nCVE-2020-26935<\/a>
\nSUSE<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
phpmyadmin -- phpmyadmin<\/td>\nphpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.<\/td>\n2020-10-10<\/td>\nnot yet calculated<\/td>\nCVE-2020-26934<\/a>
\nSUSE<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
phpredisadmin -- phpredisadmin<\/td>\nphpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27163<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
qemu -- qemu<\/td>\nAn issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the ati_2d_blt() routine in hw\/display\/ati_2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-24352<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
qualcomm -- qcmap<\/td>\nThe QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAP_CLI can be run via sudo or setuid, this also allows elevating privileges to root. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-25859<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
qualcomm -- qcmap<\/td>\nThe QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of service. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-25858<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
rapid7 -- nexpose<\/td>\nA SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-7383<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
red_hat -- jboss_eap<\/td>\nA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. This flaw allows an attacker to perform a complete authentication bypass by using an arbitrary user and password. The highest threat to vulnerability is to system availability.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-14299<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
rockwell_automation -- allen-bradley_flex_io_1794-aent\/b<\/td>\nAn exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT\/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-6083<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
rockwell_automation -- allen-bradley_flex_io_1794-aent\/b<\/td>\nAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT\/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.If the Simple Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-6086<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
rockwell_automation -- allen-bradley_flex_io_1794-aent\/b<\/td>\nAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT\/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-6087<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
ros_comm -- openrobotics<\/td>\nInteger Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https:\/\/github.com\/ros\/ros_comm\/pull\/2065<\/a>.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-16124<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sage -- dpw<\/td>\nAn issue was discovered in Sage DPW 2020_06_x before 2020_06_002. The search field \"Kurs suchen\" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can be used to change the contents of the displayed site, redirect to other sites, or steal user credentials. Additionally, users are potential victims of browser exploits and JavaScript malware.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26584<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sage -- dpw<\/td>\nAn issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users to upload JavaScript (in a file) via the expenses claiming functionality. However, to view the file, authentication is required. By exploiting this vulnerability, an attacker can persistently include arbitrary HTML or JavaScript code into the affected web page. The vulnerability can be used to change the contents of the displayed site, redirect to other sites, or steal user credentials. Additionally, users are potential victims of browser exploits and JavaScript malware.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26583<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
samsung -- samsung<\/td>\nSamsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-7811<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- 3d_visual_enterprise_viewer<\/td>\nSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6372<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- 3d_visual_enterprise_viewer<\/td>\nSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6376<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- 3d_visual_enterprise_viewer<\/td>\nSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6375<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- 3d_visual_enterprise_viewer<\/td>\nSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6374<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- 3d_visual_enterprise_viewer<\/td>\nSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6373<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- business_planning_and_consolidation<\/td>\nSAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6368<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- commerce_cloud<\/td>\nSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6272<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- commerce_cloud<\/td>\nSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username\/passphrase credentials. The user can change their own passphrase, but this does not invalidate active sessions that the user may have with SAP Commerce Cloud web applications, which gives an attacker the opportunity to reuse old session credentials, resulting in Insufficient Session Expiration.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6363<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- netweaver_application_server<\/td>\nSAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated attacker to include JavaScript blocks in any web page or URL with different symbols which are otherwise not allowed. On successful exploitation an attacker can steal authentication information of the user, such as data relating to his or her current session and limitedly impact confidentiality and integrity of the application, leading to Reflected Cross Site Scripting.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6319<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- netweaver_application_server<\/td>\nUser enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6371<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- netweaver_as_java<\/td>\nSAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirect users to a malicious site due to insufficient reverse tabnabbing URL validation. The attacker could execute phishing attacks to steal credentials of the victim or to redirect users to untrusted web pages containing malware or similar malicious exploits.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6365<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- netweaver_enterprise_portal<\/td>\nSAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-controlled inputs and allows an attacker on a valid session to create an XSS that will be both reflected immediately and also be persisted and returned in further access to the system, resulting in Cross Site Scripting.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6323<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sap -- soulution_manager_and_sap_focused_run<\/td>\nSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to read and modify all system files and also impact system availability.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-6364<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
siport -- mp<\/td>\nA vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the system and perform (potentially administrative) actions on behalf of those users if the single sign-on feature (\"Allow logon without password\") is enabled.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-7591<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
snyk -- prototype_pollution<\/td>\nThe package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-7743<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sonatype -- nexus_repository_manager<\/td>\nA Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-15012<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5137<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5141<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5138<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5134<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5133<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5135<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5136<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5140<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5139<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nSonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5143<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sonicos -- sonicos<\/td>\nA stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.<\/td>\n2020-10-12<\/td>\nnot yet calculated<\/td>\nCVE-2020-5142<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
sopel -- channelmgnt<\/td>\nIn the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op\/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2 includes 1.0.3 of channelmgnt, and thus is safe from this vulnerability. See referenced GHSA-23pc-4339-95vg.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-15251<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
sylabs -- singularity<\/td>\nSingularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite\/create any files on the host filesystem during the extraction with a crafted squashfs filesystem. The extraction occurs automatically for unprivileged (either installation or with `allow setuid = no`) run of Singularity when a user attempt to run an image which is a local SIF image or a single file containing a squashfs filesystem and is coming from remote sources `library:\/\/`<\/a> or `shub:\/\/`<\/a>. Image build is also impacted in a more serious way as it can be used by a root user, allowing an attacker to overwrite\/create files leading to a system compromise, so far bootstrap methods `library`, `shub` and `localimage` are triggering the squashfs extraction. This issue is addressed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4 especially if they use Singularity mainly for building image as root user. There is no solid workaround except to temporary avoid to use unprivileged mode with single file images in favor of sandbox images instead. Regarding image build, temporary avoid to build from `library` and `shub` sources and as much as possible use `--fakeroot` or a VM for that.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-15229<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
telegram -- telegram_desktop<\/td>\nTelegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export key. This attacker may consequently gain access to all chat conversation and media files.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-25824<\/a>
\nMISC<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
trend_micro -- antivirus_for_mac<\/td>\nTrend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-27013<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
trend_micro -- antivirus_for_mac_2020<\/td>\nTrend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-25778<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
trend_micro -- antivirus_for_mac_2020<\/td>\nTrend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-25777<\/a>
\nN\/A<\/a>
\nN\/A<\/a><\/td>\n<\/tr>\n
trend_micro -- antivirus_for_mac_2020<\/td>\nTrend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature.<\/td>\n2020-10-13<\/td>\nnot yet calculated<\/td>\nCVE-2020-25779<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
uniper_networks -- mist_cloud_ui<\/td>\nWhen Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1675<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
uniper_networks -- mist_cloud_ui<\/td>\nWhen SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-1677<\/a>
\nCONFIRM<\/a><\/td>\n<\/tr>\n
united_planet -- united_planet<\/td>\nCross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 20.03 allows remote attackers to inject arbitrary web script or HTML via the request parameter.<\/td>\n2020-10-14<\/td>\nnot yet calculated<\/td>\nCVE-2020-24188<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
veritas -- aptare<\/td>\nVeritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server. An unauthenticated user could login to the application and gain access to the data and functionality accessible to the targeted user account.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-27157<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
veritas -- aptare<\/td>\nVeritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for remote code execution by an unauthenticated user.<\/td>\n2020-10-15<\/td>\nnot yet calculated<\/td>\nCVE-2020-27156<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
vm-superio -- vm-superio<\/td>\nIn vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input). This behavior cannot be reproduced from the guest side. When no rate limiting is in place, the host can be subject to memory pressure, impacting all other VMs running on the same host.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-27173<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
vmware -- horizon_client<\/td>\nVMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-3991<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
windows -- application_compatibility_client_library<\/td>\nAn elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations, aka 'Windows Application Compatibility Client Library Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16920.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16876<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
windows -- remote_desktop_service<\/td>\nA denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Service Denial of Service Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16863<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
windows --visual_studio_code<\/td>\nA remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-16977<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
wordpress -- wordpress<\/td>\nTestimonial Rotator WordPress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in \/wp-admin\/post.php. If a user intercepts a request and inserts a payload in \"cite\" parameter, the payload will be stored in the database.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-26672<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n
xwiki -- xwiki<\/td>\nIn XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. This is patched in XWiki 12.5 and XWiki 11.10.6.<\/td>\n2020-10-16<\/td>\nnot yet calculated<\/td>\nCVE-2020-15252<\/a>
\nCONFIRM<\/a>
\nMISC<\/a>
\nMISC<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\"\"<\/p>\n

 <\/p>\n

 <\/p>\n


\nFrederico Freitas<\/strong>, CISSP \u00e9 Solutions Sales Engineer na Add Value e especialista em ciberseguran\u00e7a.<\/span><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Em alguns casos, as vulnerabilidades do Boletim podem n\u00e3o ter pontua\u00e7\u00f5es CVSS atribu\u00eddas ainda. Visite o NVD (https:\/\/nvd.nist.gov\/vuln\/search) para obter informa\u00e7\u00f5es de vulnerabilidade atualizadas, que incluem as pontua\u00e7\u00f5es CVSS assim que estiverem dispon\u00edveis.<\/p>\n

Destaque Semanal<\/p>\n

O destaque de alerta de vulnerabilidades desta semana vai para os dispositivos de conectividade da Netgear devido a sua popularidade, exposi\u00e7\u00e3o e grau de risco.<\/p>\n

Vale destacar que estes dispositivos est\u00e3o geralmente conectados \u00e0 Internet e permitem o acesso remoto, juntando com vulnerabilidades<\/p>\n","protected":false},"author":1,"featured_media":6552,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[3],"tags":[132,133,134,130],"class_list":["post-6547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguranca","tag-cisa","tag-nist","tag-nvd","tag-vulnerabilidade"],"yoast_head":"\nResumo de Vulnerabilidade de Outubro de 2020 - Add Value<\/title>\n<meta name=\"description\" content=\"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Resumo de Vulnerabilidade de Outubro de 2020 - Add Value\" \/>\n<meta property=\"og:description\" content=\"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\" \/>\n<meta property=\"og:site_name\" content=\"Add Value\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-30T11:02:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-10-30T17:21:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"650\" \/>\n\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"addvalue\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"addvalue\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"135 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\"},\"author\":{\"name\":\"addvalue\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e\"},\"headline\":\"Resumo de Vulnerabilidades da Semana de 12 de outubro de 2020\",\"datePublished\":\"2020-10-30T11:02:29+00:00\",\"dateModified\":\"2020-10-30T17:21:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\"},\"wordCount\":27043,\"image\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg\",\"keywords\":[\"CISA\",\"NIST\",\"NVD\",\"vulnerabilidade\"],\"articleSection\":[\"Seguran\u00e7a\"],\"inLanguage\":\"pt-BR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\",\"url\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\",\"name\":\"Resumo de Vulnerabilidade de Outubro de 2020 - Add Value\",\"isPartOf\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg\",\"datePublished\":\"2020-10-30T11:02:29+00:00\",\"dateModified\":\"2020-10-30T17:21:28+00:00\",\"author\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e\"},\"description\":\"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.\",\"breadcrumb\":{\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage\",\"url\":\"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg\",\"contentUrl\":\"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg\",\"width\":650,\"height\":350},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\/\/addvalue.com.br\/novo\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Resumo de Vulnerabilidades da Semana de 12 de outubro de 2020\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/#website\",\"url\":\"https:\/\/addvalue.com.br\/novo\/\",\"name\":\"Add Value\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/addvalue.com.br\/novo\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e\",\"name\":\"addvalue\",\"url\":\"https:\/\/addvalue.com.br\/novo\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Resumo de Vulnerabilidade de Outubro de 2020 - Add Value","description":"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/","og_locale":"pt_BR","og_type":"article","og_title":"Resumo de Vulnerabilidade de Outubro de 2020 - Add Value","og_description":"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.","og_url":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/","og_site_name":"Add Value","article_published_time":"2020-10-30T11:02:29+00:00","article_modified_time":"2020-10-30T17:21:28+00:00","og_image":[{"width":650,"height":350,"url":"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg","type":"image\/jpeg"}],"author":"addvalue","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"addvalue","Est. tempo de leitura":"135 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#article","isPartOf":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/"},"author":{"name":"addvalue","@id":"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e"},"headline":"Resumo de Vulnerabilidades da Semana de 12 de outubro de 2020","datePublished":"2020-10-30T11:02:29+00:00","dateModified":"2020-10-30T17:21:28+00:00","mainEntityOfPage":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/"},"wordCount":27043,"image":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage"},"thumbnailUrl":"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg","keywords":["CISA","NIST","NVD","vulnerabilidade"],"articleSection":["Seguran\u00e7a"],"inLanguage":"pt-BR"},{"@type":"WebPage","@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/","url":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/","name":"Resumo de Vulnerabilidade de Outubro de 2020 - Add Value","isPartOf":{"@id":"https:\/\/addvalue.com.br\/novo\/#website"},"primaryImageOfPage":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage"},"image":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage"},"thumbnailUrl":"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg","datePublished":"2020-10-30T11:02:29+00:00","dateModified":"2020-10-30T17:21:28+00:00","author":{"@id":"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e"},"description":"O Boletim Semanal de Resumo de Vulnerabilidade CISA \u00e9 criado usando informa\u00e7\u00f5es do NIST NVD. Clique no link e saiba mais.","breadcrumb":{"@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#primaryimage","url":"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg","contentUrl":"https:\/\/addvalue.com.br\/novo\/wp-content\/uploads\/2020\/10\/vulnerabilidades.jpg","width":650,"height":350},{"@type":"BreadcrumbList","@id":"https:\/\/addvalue.com.br\/novo\/seguranca\/resumo_vulnerabilidade\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/addvalue.com.br\/novo\/"},{"@type":"ListItem","position":2,"name":"Resumo de Vulnerabilidades da Semana de 12 de outubro de 2020"}]},{"@type":"WebSite","@id":"https:\/\/addvalue.com.br\/novo\/#website","url":"https:\/\/addvalue.com.br\/novo\/","name":"Add Value","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/addvalue.com.br\/novo\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Person","@id":"https:\/\/addvalue.com.br\/novo\/#\/schema\/person\/9dcae17489d35780e33cd4f1d48db37e","name":"addvalue","url":"https:\/\/addvalue.com.br\/novo\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/posts\/6547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/comments?post=6547"}],"version-history":[{"count":4,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/posts\/6547\/revisions"}],"predecessor-version":[{"id":6556,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/posts\/6547\/revisions\/6556"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/media\/6552"}],"wp:attachment":[{"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/media?parent=6547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/categories?post=6547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/addvalue.com.br\/novo\/wp-json\/wp\/v2\/tags?post=6547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}