Skip to content
OpenAdvisories

Archive

October 2020

Vulnerabilities first published in this month (UTC), newest first.

8 results · Clear filters · Feed

  • High 7.2
    CVE-2020-8260 Exploited Public exploit EPSS 96%

    A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perfor…

    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-3580 Exploited · Ransomware Public exploit EPSS 86%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against …

    KEV Nov 3, 2021
  • High 7.2
    CVE-2020-14883 Exploited Public exploit EPSS 98%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-14864 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: In…

    KEV Jan 18, 2022
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2020-9934 Exploited Public exploit

    An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…

    KEV Sep 8, 2022