Skip to content
OpenAdvisories

Archive

14 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /14 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2020-8350

    An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 t…

    Lenovo ThinkPad Stack WIreless Router firmware
  • High 7.8
    CVE-2020-8338

    A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with…

    Lenovo Diagnostics
  • High 7.3
    CVE-2020-8345

    A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan fea…

    Lenovo Vantage HardwareScan Plugin
  • High 8.2
    CVE-2020-15229

    Path traversal and files overwrite with unsquashfs

    Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite/create any files on the host fi…

    hpcng singularity singularity github.com/sylabs/singularity Alpine Go
  • High 7.3
    CVE-2020-15253

    Stored XSS in Grocy

    Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping loca…

    Grocy project Grocy
  • High 7.1
    CVE-2020-3483

    Duo Network Gateway (DNG) Information Disclosure Vulnerability

    Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted in certificate and private key information being written out…

    Cisco Duo Network Gateway (DNG) Network devices
  • High 7.0
    CVE-2020-9746

    Exploitable NULL pointer deref could lead to arbitrary code execution

    Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in…

    Adobe Flash Player flashplugin-nonfree Ubuntu
  • High 7.5
    CVE-2020-6083

    An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Brad…

  • High 7.5
    CVE-2020-6087

    An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Brad…

  • High 7.5
    CVE-2020-6086

    An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Brad…

  • High 7.5
    CVE-2020-7330

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables

    McAfee McAfee Total Protection (MTP) Trial