Archive
3 November 2020
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
High 7.7
Cross-Site Scripting in BookStack
In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would run, within the context of the current page, when clicked or submitted. Additionall…
-
Unscored —
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.…
-
Unscored —
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could ha…
-
High 7.7
Cross-Site Scripting in BookStack
In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. If you th…
-
Medium 4.3
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users b…
-
Medium 5.4
IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to h…
-
Low 3.5
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating syst…
-
Unscored —
`term_size` is unmaintained; use `terminal_size` instead
The [`term_size`](https://crates.io/crates/term_size) crate is no longer maintained. Consider using [`terminal_size`](https://crates.io/crates/terminal_size) instead.
-
Unscored —
Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform …
-
Critical 9.6CVE-2020-16010 Exploited
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had comprom…
KEV Nov 3, 2021 -
Unscored —
Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had comprom…
-
High 8.8
Inappropriate implementation in V8
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
KEV Nov 3, 2021 -
Unscored —
Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploi…
-
Unscored —
Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potential…
-
Unscored —
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exp…
-
Unscored —
Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially explo…
-
Unscored —
Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potential…
-
Unscored —
Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit hea…
-
Unscored —
Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially …
-
Unscored —
Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer…
-
Unscored —
Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the rendere…
-
Unscored —
Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the re…
-
Unscored —
Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap …
-
Unscored —CVE-2020-15994 EPSS 12%
Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corru…
-
Unscored —
Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap…
-
Unscored —
Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had …
-
Unscored —
Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised…
-
Unscored —
Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the ren…
-
Unscored —
Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sen…
-
Unscored —
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacke…
-
Unscored —
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof securit…
-
Unscored —
Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to s…
-
Unscored —
Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to by…
-
Unscored —
Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potent…
-
Unscored —
Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sens…
-
Unscored —
Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker …