CVEs published October 5, 2020
23 CVEs were published on October 5, 2020: 1 critical, 1 high.
- Published
- 23
- Critical
- 1
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Intel BIOS
- 5
- <ZXONE 19700 SNPE>
- 1
- AWS Community Community Collections
- 1
- AWS Community Community Collections · ansible
- 1
- IBM Maximo Asset Management
- 1
- Intel(R) Driver & Support Assistant
- 1
- json-pointer · org.webjars.npm:json-pointer
- 1
- Mitsubishi Electric QJ71MES96 · Mitsubishi Electric QJ7… +54
- 1
- Nextcloud Deck
- 1
- Nextcloud Deck app
- 1
Critical 1
High 1
Medium, low and unrated 21
- CVE-2020-15237Timing attack in Shrineshrinerb shrine · shrine
- CVE-2020-16226Mitsubishi Electric Multiple ProductsMitsubishi Electric QJ71MES96 · Mitsubishi Electric QJ7… +54
- CVE-2020-24231Symmetric DS <3.12.0 uses mx4j to provide access to JMX over HTTP.
- CVE-2020-15235Sensitive data exposure in RACTFractf core
- CVE-2020-6875A ZTE product is impacted by the improper access control vulnerability.<ZXONE 19700 SNPE>
- CVE-2020-26048The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension
- CVE-2020-0571Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processor Series mIntel BIOS
- CVE-2019-14556Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series PIntel BIOS
- CVE-2020-8671Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Processor 400Intel BIOS
- CVE-2019-14558Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & Intel BIOS
- CVE-2020-12302Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enabIntel(R) Driver & Support Assistant
- CVE-2019-14557Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series ProcessorIntel BIOS
- CVE-2020-26061ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability.
- CVE-2020-25635A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is compleAWS Community Community Collections · ansible
- CVE-2020-8182Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had tNextcloud Deck
- CVE-2020-8223A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than theyNextcloud Server
- CVE-2020-8235Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.Nextcloud Deck app
- CVE-2020-8228A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.Nextcloud Preferred Provider
- CVE-2020-25636A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers.AWS Community Community Collections
- CVE-2020-26166The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web scri
- CVE-2020-7709Prototype Pollutionjson-pointer · org.webjars.npm:json-pointer