Skip to content
OpenAdvisories

Archive

October 2020

Vulnerabilities first published in this month (UTC), newest first.

← September 2020 2020 / October November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-3580 Exploited · Ransomware Public exploit EPSS 86%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2020-6308 Public exploit EPSS 62%

    SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated a…

    SAP_SE SAP BusinessObjects Business Intelligence Platform (Web Services)
  • Medium 5.3
    CVE-2020-13937 Public exploit EPSS 78%

    Authentication bypass in Apache Kylin

    Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's…

    org.apache.kylin:kylin Maven
  • Medium 5.5
    CVE-2020-16938 Public exploit

    Windows Kernel Information Disclosure Vulnerability

    <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this …

    Microsoft Windows 10 Version 2004 Windows Server version 2004 Windows
  • Medium 5.5
    CVE-2020-9934 Exploited Public exploit

    An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…

    Apple macOS iOS macOS iOS
    KEV Sep 8, 2022
  • Medium 5.6
    CVE-2020-15215 Public exploit

    Context isolation bypass in Electron

    Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affe…

    electron electron electron npm