Skip to content
OpenAdvisories

Archive

9 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /9 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-13955

    Missing Authentication for Critical Function in Apache Calcite

    HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connect with Druid and Splunk so information leakage may happen wh…

    org.apache.calcite:calcite-core org.apache.calcite:calcite-druid org.apache.calcite:calcite-splunk Maven
  • Medium 6.8
    CVE-2020-26913

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.7
    CVE-2020-26914

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38…

  • Medium 6.0
    CVE-2020-26915

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 5.4
    CVE-2020-26916

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.…

  • Medium 4.1
    CVE-2020-26917

    Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 b…

  • Medium 4.1
    CVE-2020-26918

    Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 b…

  • Medium 6.4
    CVE-2020-26922

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24…

  • Medium 4.3
    CVE-2020-26923

    Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600…

  • Medium 5.9
    CVE-2020-26931

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC760…