Archive
16 October 2020
Vulnerabilities first published on this day (UTC), newest first.
201 results · Feed
-
Unscored —
In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to acces…
-
Medium 6.8
Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users wit…
-
Medium 6.8
Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remot…
-
High 8.1
Undefined Behavior in bounded Crossbeam channel
Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not act…
-
Low —
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
### Impact A server we connect to with http4s-async-http-client could theoretically respond with a large or malicious compressed stream and exhaust memory in the client JVM. It does not affect http4s servers, other client backends, or clients that speak only …
-
Unscored —CVE-2020-9992 Public exploit
This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, a…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processin…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0,…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina…
-
High 8.5
RCE in XWiki
In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead t…
-
Unscored —
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 1…
-
Unscored —
A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state managem…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14…
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing ma…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen…
-
Unscored —
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing mali…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13…
-
Medium 5.5
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…
KEV Sep 8, 2022 -
Unscored —
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, t…
-
High 8.0
Insecure use of shell.openExternal in Wire
In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link…
-
Unscored —
A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6,…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 13.6 and iPadOS 13.6. A remote attacker may b…
-
Unscored —
A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 1…
-
Unscored —
An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…
-
Unscored —
An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is …
-
Unscored —
This issue was addressed with improved data protection. This issue is fixed in macOS Catalina 10.15.6. A local user may…
-
Medium 6.1
containerd can be coerced into leaking credentials during image pull
In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific im…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.2. A malicious attacker may …
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2.…
-
Unscored —
Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watch…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvO…
-
High 7.8CVE-2020-9907 Exploited
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.…
KEV Jun 27, 2022 -
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2.…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…
-
High 8.2
IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-F…