Archive

27 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /27 November 2020 →

All Critical High Medium Low Exploited only Public exploit

173 results · Feed

Unscored —

CVE-2019-8547

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2019-8579

An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Sec…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-8573

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Se…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2019-8575

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1,…

Apple AirPort Base Station Firmware Update

Oct 27, 2020
Unscored —

CVE-2020-27888

An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 device…

Oct 27, 2020
Unscored —

CVE-2019-8538

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.1…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2019-8569

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5, Sec…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-8564

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-8528

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 5.2, macOS Mojave …

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2019-8534

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is …

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-8539

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6,…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-7291

A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firm…

Apple AirPort Base Station Firmware Update

Oct 27, 2020
Unscored —

CVE-2019-8532

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in watc…

Apple watchOS iOS iOS

Oct 27, 2020
Unscored —

CVE-2019-8509

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Updat…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2019-8525

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Se…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Su…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2018-4474

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, …

Apple watchOS tvOS Safari Windows iOS Browsers

Oct 27, 2020
Unscored —

CVE-2019-6238

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. …

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4467

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Se…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4448

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4,…

Apple macOS iOS macOS iOS

Oct 27, 2020
Unscored —

CVE-2018-4452

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Se…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4468

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Mojave 10.14.1, Security Upd…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4451

This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4433

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security…

Apple macOS watchOS tvOS macOS iOS

Oct 27, 2020
High —

GHSA-r82c-j4mq-5xfw

Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs

### Impact Due to a sudden upstream breaking change by Bitly, versions of `bitlyshortener` <0.5.0 can generate an invalid short URL when a vanity domain exists. ### Patches Upgrading `bitlyshortener` to 0.5.0 or newer will prevent the generation of any such i…

bitlyshortener PyPI

Oct 27, 2020
Unscored —

CVE-2018-4444

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1…

Apple tvOS Safari iOS Windows iOS Browsers

Oct 27, 2020
Unscored —

CVE-2018-4391

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Si…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4428

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting op…

Apple iOS iOS

Oct 27, 2020
Unscored —

CVE-2018-4381

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. P…

Apple tvOS iOS iOS

Oct 27, 2020
Unscored —

CVE-2018-4390

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Si…

Apple macOS macOS

Oct 27, 2020
Unscored —

CVE-2018-4339

This issue was addressed with a new entitlement. This issue is fixed in iOS 12.1. A local user may be able to read a pe…

Apple iOS iOS

Oct 27, 2020
Unscored —

CVE-2018-4296

This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with addi…

Apple macOS macOS

Oct 27, 2020
High 7.1

CVE-2020-15238 Public exploit

Local privilege escalation Blueman

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and…

blueman-project blueman blueman blueman Debian Ubuntu

Oct 27, 2020
Unscored —

CVE-2020-27853

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arb…

Oct 27, 2020
High 7.5

CVE-2020-7755

Regular Expression Denial of Service (ReDoS)

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.

dat.gui npm

Oct 27, 2020
High 7.8

CVE-2020-11858 Public exploit

Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,…

Micro Focus Operation Bridge Manager Operation Bridge (containerized)

Oct 27, 2020
Critical 9.8

CVE-2020-11854 Public exploit Scanner template EPSS 74%

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Applicati…

Micro Focus Operation Bridge Manager Operation Bridge (containerized) Application Performance Management

Oct 27, 2020
High 7.5

CVE-2020-7754

Regular Expression Denial of Service (ReDoS)

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

npm-user-validate npm

Oct 27, 2020
Unscored —

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This paramete…

Oct 27, 2020
Unscored —

CVE-2020-6023

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files i…

Oct 27, 2020