Skip to content
OpenAdvisories

Archive

October 2020

Vulnerabilities first published in this month (UTC), newest first.

← September 2020 2020 / October November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

60 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-27998

    Missing Authorization in FastReport

    An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.

    FastReport.OpenSource NuGet
  • Critical 9.8
    CVE-2020-27654

    Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers…

    Synology Synology Router Manager (SRM)
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022
  • Critical 9.8
    CVE-2020-11854 Public exploit Scanner template EPSS 74%

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Applicati…

    Micro Focus Operation Bridge Manager Operation Bridge (containerized) Application Performance Management
  • Critical 9.3
    CVE-2020-15271

    Shell Command Execution in lookatme

    In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their…

    d0c-s4vage lookatme lookatme lookatme Debian PyPI
  • Critical 9.8
    CVE-2020-27664

    Authorization bypass in Strapi

    admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.

    strapi npm
  • Critical 9.1
    CVE-2020-27195

    Use After Free in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Critical 9.6
    CVE-2020-7750 Public exploit

    Cross-site Scripting (XSS)

    This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.

    scratch-svg-renderer npm
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14859

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2020-14875

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

    Oracle Marketing
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    Oracle Solaris Operating System
    KEV Nov 3, 2021
  • Critical 9.1
    CVE-2020-14876

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported …

    Oracle Trade Management mysql-5.5 Ubuntu
  • Critical 9.8
    CVE-2020-14855

    Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administr…

    Oracle Universal Work Queue
  • Critical 9.8
    CVE-2020-14841 EPSS 50%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2020-14825 EPSS 30%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2020-14805

    Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Se…

    Oracle E-Business Suite Secure Enterprise Search
  • Critical 9.8
    CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-27197

    libtaxii Server-Side Request Forgery vulnerability

    TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is used for the XML parser. NOTE: the vendor points out that t…

    libtaxii PyPI
  • Critical 9.9
    CVE-2020-26943

    Arbitrary Code Execution in blazar-dashboard

    An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under (because the Python eval f…

    blazar-dashboard PyPI
  • Critical 9.8
    CVE-2019-17640 Public exploit

    Path Traversal in Eclipse Vert

    In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allo…

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven
  • Critical 9.8
    CVE-2020-12504

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/…

    Pepperl+Fuchs Westermo Korenix JetNet
  • Critical 9.8
    CVE-2020-12501

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.

    Pepperl+Fuchs Westermo Korenix JetNet
  • Critical 9.8
    CVE-2020-12500

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administratio…

    Pepperl+Fuchs Westermo Korenix P+F Comtrol RocketLinx
  • Critical 9.8
    CVE-2020-27156

    Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for…

  • Critical 10.0
    CVE-2020-6364 Public exploit

    SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an at…

    SAP SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager)
  • Critical 9.8
    CVE-2020-8349

    An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking O…

    Lenovo Cloud Networking Operating System (CNOS)
  • Critical 9.8
    CVE-2020-13957 Public exploit EPSS 79%

    Incorrect Authorization in Apache Solr

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. Th…

    org.apache.solr:solr-core org.apache.solr:solr-parent org.apache.solr:solr-solrj Maven
  • Critical 9.8
    CVE-2020-17407

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE …

    Microhard Bullet-LTE
  • Critical 9.8
    CVE-2019-17444 Scanner template EPSS 69%

    JFrog Artifactory does not enforce default admin password change

    Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Ar…

    jfrog artifactory
  • Critical 9.8
    CVE-2020-26867

    ARC Informatique PcVue Deserialization of Untrusted Data

    ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

    ARC Informatique PcVue
  • Critical 9.8
    CVE-2020-5135 Exploited · Ransomware EPSS 27%

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

    SonicWall SonicOS Network devices
    KEV Mar 15, 2022
  • Critical 9.8
    CVE-2020-26935 Scanner template EPSS 64%

    phpMyAdmin SQL injection vulnerability

    An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Critical 9.6
    CVE-2020-26897

    Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…

  • Critical 9.6
    CVE-2020-26898

    NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.

  • Critical 9.6
    CVE-2020-26899

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752…

  • Critical 9.6
    CVE-2020-26900

    Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…

  • Critical 9.6
    CVE-2020-26901

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR7…

  • Critical 9.6
    CVE-2020-26902

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.…

  • Critical 9.6
    CVE-2020-26903

    Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…