Skip to content
OpenAdvisories

Archive

14 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /14 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.4
    CVE-2020-8332

    A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo a…

    IBM Lenovo System x System x
  • Medium 6.5
    CVE-2020-7383

    SQL Injection in Rapid7 Nexpose

    A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.

    Rapid7 Nexpose
  • Medium 6.8
    CVE-2020-15224

    Socket syscalls can leak enclave memory contents in Open Enclave

    In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerabilit…

    openenclave openenclave
  • Medium 4.6
    CVE-2020-7317

    ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability

    Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed.

    McAfee ePolicy Orchistrator (ePO)
  • Medium 4.6
    CVE-2020-7318 Scanner template

    ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability

    Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

    McAfee ePolicy Orchistrator (ePO)
  • Medium 6.6
    CVE-2020-3427

    Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability

    The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate fi…

    Cisco Duo Authentication for Windows Logon and RDP Windows Network devices
  • Medium 6.3
    CVE-2020-4395

    IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated…

    IBM Security Access Manager Appliance
  • Medium 6.1
    CVE-2020-24551

    IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')

    IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.

    IProom MMC+ Server