Skip to content
OpenAdvisories

Archive

13 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /13 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2020-12911

    A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. …

    Windows
  • Unscored —
    CVE-2020-12928 Public exploit

    A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate…

  • Unscored —
    CVE-2020-12933

    A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26…

    Windows
  • Unscored —
    CVE-2020-25645

    A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypte…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Critical 9.8
    CVE-2020-13957 Public exploit EPSS 79%

    Incorrect Authorization in Apache Solr

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. Th…

    org.apache.solr:solr-core org.apache.solr:solr-parent org.apache.solr:solr-solrj Maven
  • Unscored —
    CVE-2018-20243

    The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomrati…

  • High 7.7
    CVE-2020-15251

    Privilege Escalation in Channelmgnt plug-in for Sopel

    In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less …

    MirahezeBots sopel-channelmgnt sopel-plugins-channelmgnt sopel Ubuntu PyPI
  • High 7.8
    CVE-2020-17417 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.3…

    Foxit Reader
  • High 7.8
    CVE-2020-17415

    This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.3…

    Foxit PhantomPDF
  • High 7.8
    CVE-2020-17416 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.3…

    Foxit Reader
  • High 7.8
    CVE-2020-17414

    This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798…

    Foxit Reader
  • High 7.8
    CVE-2020-17412

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

    Foxit PhantomPDF
  • High 7.8
    CVE-2020-17413

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

    Foxit PhantomPDF
  • Low 3.3
    CVE-2020-17411

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

    Foxit PhantomPDF
  • High 7.8
    CVE-2020-17410 EPSS 10%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0…

    Foxit PhantomPDF
  • High 8.8
    CVE-2020-17406

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE …

    Microhard Bullet-LTE
  • Critical 9.8
    CVE-2020-17407

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE …

    Microhard Bullet-LTE
  • Medium 6.5
    CVE-2020-17409

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NET…

    NETGEAR Multiple Routers Network devices
  • Unscored —
    CVE-2020-25779

    Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph at…

    Trend Micro Trend Micro Antivirus for Mac (Consumer)
  • Unscored —
    CVE-2020-7590

    A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addi…

    Siemens DCA Vantage Analyzer ICS / OT
  • Unscored —
    CVE-2020-15797

    A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addi…

    Siemens DCA Vantage Analyzer ICS / OT
  • High 7.3
    CVE-2020-16124

    Integer overflow in ROS communications library

    Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic …

    Open Robotics ros_comm ROS communications packages ros-ros-comm ros-ros-comm Debian Ubuntu
  • High 7.3
    CVE-2020-7743

    Prototype Pollution

    The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

    mathjs npm