Skip to content
OpenAdvisories

Archive

14 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /14 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Unscored —
    CVE-2020-0398

    In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could le…

    Android
  • Unscored —
    CVE-2020-0400

    In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingI…

    Android
  • Unscored —
    CVE-2020-0411

    In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could l…

    Android
  • Unscored —
    CVE-2020-0419

    In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installa…

    Android
  • Unscored —
    CVE-2019-2194

    In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper cast…

    Android
  • Unscored —
    CVE-2020-25188

    An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the…

  • High 7.5
    CVE-2020-6083

    An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Brad…

  • Medium 6.1
    CVE-2020-24551

    IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')

    IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.

    IProom MMC+ Server
  • High 7.5
    CVE-2020-6087

    An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Brad…

  • High 7.5
    CVE-2020-6086

    An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Brad…

  • High 7.5
    CVE-2020-7330

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables

    McAfee McAfee Total Protection (MTP) Trial
  • Unscored —
    CVE-2020-24188

    Cross-site scripting (XSS) vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to…