CVEs published October 12, 2020
60 CVEs were published on October 12, 2020: 3 critical, 5 high. 1 is now in CISA KEV.
- Published
- 60
- Critical
- 3
- High
- 5
- Medium
- 22
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 1
- Fix available
- 5
Most affected products
- SonicWall SonicOS
- 11
- IBM Curam SPM
- 9
- IBM Security Guardium
- 5
- HUAWEI P30 Pro
- 4
- Taurus-AN00B
- 4
- ARC Informatique PcVue
- 3
- IBM Security Access Manager · IBM Security Verify Access
- 3
- IBM Cognos Analytics
- 2
- IBM InfoSphere Information Server
- 2
- Apache Tomcat · tomcat +1
- 1
Critical 3
- CVE-2019-17444JFrog Artifactory does not enforce default admin password changeJfrog Artifactory
- CVE-2020-26867ARC Informatique PcVue Deserialization of Untrusted DataARC Informatique PcVue
- CVE-2020-5135A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code SonicWall SonicOS
High 5
- CVE-2020-26546An issue was discovered in HelpDeskZ 1.0.2.
- CVE-2020-26869ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized ActorARC Informatique PcVue
- CVE-2020-26868ARC Informatique PcVue Access to Critical Private Variable via Public MethodARC Informatique PcVue
- CVE-2020-4779A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10.IBM Curam SPM
- CVE-2020-4772An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10.IBM Curam SPM
Medium, low and unrated 52
- CVE-2020-15012A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19.
- CVE-2020-15250Information disclosure in JUnit4junit-team junit4 · junit:junit
- CVE-2020-25825In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.
- CVE-2020-12670XSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module / mailboxes Endpoint when attempting to sav
- CVE-2020-8821An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint.
- CVE-2020-8820An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint.
- CVE-2020-9240Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability.Taurus-AN00B
- CVE-2020-9110Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability.Taurus-AN00B
- CVE-2020-9091Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability.Taurus-AN00B
- CVE-2020-13943If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum nuApache Tomcat · tomcat +1
- CVE-2020-9106HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability.HUAWEI P30 Pro
- CVE-2020-9123HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulnerHUAWEI P30 Pro
- CVE-2020-9109There is an information disclosure vulnerability in several smartphones.HUAWEI Mate 20;HUAWEI Mate 20 X;HUAWEI P30 Pro;Laya-AL00EP;…
- CVE-2020-9122Some Huawei products have an insufficient input verification vulnerability.HiRouter-CD30-10;HiRouter-CT31-10;WS5200-12;WS5281-10;WS580…
- CVE-2020-9107HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability.HUAWEI P30 Pro
- CVE-2020-9087Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module.Taurus-AL00A
- CVE-2020-9090FusionAccess version 6.5.1 has an improper authorization vulnerability.FusionAccess
- CVE-2020-9108HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability.HUAWEI P30 Pro
- CVE-2020-9230WS5800-10 version 10.0.3.25 has a denial of service vulnerability.WS5800-10
- CVE-2020-9238Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability.Taurus-AN00B
- CVE-2020-4741IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting.IBM InfoSphere Information Server
- CVE-2020-4740IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection.IBM InfoSphere Information Server
- CVE-2020-4689IBM Security Guardium 11.2 is vulnerable to CVS Injection.IBM Security Guardium
- CVE-2020-4681IBM Security Guardium 11.2 is vulnerable to cross-site scripting.IBM Security Guardium
- CVE-2020-4680IBM Security Guardium 11.2 is vulnerable to cross-site scripting.IBM Security Guardium
- CVE-2020-4679IBM Security Guardium 11.2 is vulnerable to cross-site scripting.IBM Security Guardium
- CVE-2020-4678IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to.IBM Security Guardium
- CVE-2020-4388IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposiIBM Cognos Analytics
- CVE-2020-4302IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection.IBM Cognos Analytics
- CVE-2020-13341An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2.GitLab
- CVE-2020-7811Samsung Update Local Privilege Escalation VulnerabilitySamsung Electronics Samsung Update
- CVE-2020-4781An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which coIBM Curam SPM
- CVE-2020-4780OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10IBM Curam SPM
- CVE-2020-4778IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default IBM Curam SPM
- CVE-2020-4776A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traveIBM Curam SPM
- CVE-2020-4775A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10.IBM Curam SPM
- CVE-2020-4774An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied inpIBM Curam SPM
- CVE-2020-4773A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that fIBM Curam SPM
- CVE-2020-4699IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channeIBM Security Access Manager · IBM Security Verify Access
- CVE-2020-4661IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channeIBM Security Access Manager · IBM Security Verify Access
- CVE-2020-4660IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channeIBM Security Access Manager · IBM Security Verify Access
- CVE-2020-5143SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based oSonicWall SonicOS
- CVE-2020-5141A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service.SonicWall SonicOS
- CVE-2020-5142A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface.SonicWall SonicOS
- CVE-2020-5138A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPSonicWall SonicOS
- CVE-2020-5139A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InSonicWall SonicOS
- CVE-2020-5140A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sendiSonicWall SonicOS
- CVE-2020-5136A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assiSonicWall SonicOS
- CVE-2020-5137A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN SonicWall SonicOS
- CVE-2020-5134A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash.SonicWall SonicOS
- CVE-2020-5133A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a fireSonicWall SonicOS
- CVE-2020-14184Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vuAtlassian Jira Server