Skip to content
OpenAdvisories

Archive

October 2020

Vulnerabilities first published in this month (UTC), newest first.

← September 2020 2020 / October November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-19953 Exploited · Ransomware EPSS 31%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • High 8.0
    CVE-2018-19943 Exploited · Ransomware EPSS 23%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022
  • High 7.2
    CVE-2020-8260 Exploited Public exploit EPSS 96%

    A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perfor…

    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-3580 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • High 7.2
    CVE-2020-14883 Exploited Public exploit Scanner template EPSS 98%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-14864 Exploited Public exploit Scanner template EPSS 97%

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: In…

    Oracle Business Intelligence Enterprise Edition
    KEV Jan 18, 2022
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    Oracle Solaris Operating System
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

    Virtualization
    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2020-9934 Exploited Public exploit

    An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…

    Apple macOS iOS macOS iOS
    KEV Sep 8, 2022
  • High 7.8
    CVE-2020-9907 Exploited

    A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.…

    Apple tvOS iOS iOS
    KEV Jun 27, 2022
  • Critical 9.8
    CVE-2020-5135 Exploited · Ransomware EPSS 27%

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

    SonicWall SonicOS Network devices
    KEV Mar 15, 2022
  • Critical 9.8
    CVE-2020-26919 Exploited Scanner template EPSS 57%

    NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

    KEV Nov 3, 2021