Skip to content
OpenAdvisories

Archive

8 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /8 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2020-9048

    victor Web Client - Arbitrary File Deletion Vulnerability

    A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a…

    Johnson Controls victor Web Client version 5.4.1 and prior
  • High 8.7
    CVE-2020-13340 EPSS 67%

    An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.8
    CVE-2020-4799

    IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds wr…

    IBM Informix Dynamic Server
  • High 7.5
    CVE-2019-4545

    IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attac…

    IBM QRadar SIEM
  • High 8.8
    CVE-2020-2286

    Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin

    Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.

    Jenkins Project Jenkins Role-based Authorization Strategy Plugin org.jenkins-ci.plugins:role-strategy Web / CMS Maven
  • High 7.1
    CVE-2020-25263

    PyroCMS Vulnerable to CSRF

    PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.

    pyrocms/pyrocms Packagist
  • High 8.8
    CVE-2020-3544

    Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute arbitrary code on an affected device or cause the device to reload. This vulnerabil…

    Cisco Cisco Video Surveillance 8000 Series IP Cameras Network devices
  • High 7.8
    CVE-2020-3535

    Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows …

    Cisco Cisco Webex Teams Network devices
  • High 7.7
    CVE-2020-3467

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. The vulnerability is due to improper enforcement of role-ba…

    Cisco Cisco Identity Services Engine Software Network devices