Archive
14 October 2020
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
High 8.8
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 t…
-
Critical 9.8
An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking O…
-
High 7.8
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with…
-
High 7.3
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan fea…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo a…
-
Medium 6.5
SQL Injection in Rapid7 Nexpose
A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.
-
High 8.2
Path traversal and files overwrite with unsquashfs
Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite/create any files on the host fi…
-
Medium 6.8
Socket syscalls can leak enclave memory contents in Open Enclave
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerabilit…
-
Medium 4.6
ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability
Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed.
-
Medium 4.6CVE-2020-7318 Scanner template
ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability
Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.
-
Medium 6.6
Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability
The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate fi…
-
High 7.3
Stored XSS in Grocy
Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping loca…
-
High 7.1
Duo Network Gateway (DNG) Information Disclosure Vulnerability
Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted in certificate and private key information being written out…
-
Medium 6.3
IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated…
-
Unscored —
Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is s…
-
Unscored —
Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker coul…
-
Unscored —
Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an atta…
-
Unscored —
This module enables you login into any OAuth 2.0 compliant application using Drupal credentials. The 8.x branch of the …
-
Unscored —
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram D…
-
Unscored —
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earl…
-
High 7.0
Exploitable NULL pointer deref could lead to arbitrary code execution
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in…
-
Unscored —
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: …
-
Unscored —
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A…
-
Unscored —
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A…
-
Unscored —
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A…
-
Unscored —
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: …
-
Unscored —
In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. T…
-
Unscored —CVE-2020-0421 Public exploit
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could le…
-
Unscored —
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass …
-
Unscored —CVE-2020-0423 Public exploit
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to loca…
-
Unscored —
In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to lo…
-
Unscored —
In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local info…
-
Unscored —CVE-2020-0377 Public exploit
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —CVE-2020-0413 Public exploit
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local informati…
-
Unscored —
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer du…
-
Unscored —
In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local…
-
Unscored —
In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could le…
-
Unscored —
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead…
-
Unscored —CVE-2020-0416 Public exploit
In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead t…