CVEs published October 13, 2020
23 CVEs were published on October 13, 2020: 1 critical, 11 high.
- Published
- 23
- Critical
- 1
- High
- 11
- Medium
- 1
- Low
- 1
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Foxit PhantomPDF
- 5
- Foxit Reader
- 3
- AMD Graphics Driver for Windows
- 2
- Microhard Bullet-LTE
- 2
- Siemens DCA Vantage Analyzer
- 2
- AMD Ryzen Master
- 1
- Apache Fineract
- 1
- Apache Solr · org.apache.solr:solr-parent +2
- 1
- kernel
- 1
- mathjs
- 1
Critical 1
High 11
- CVE-2020-15251Privilege Escalation in Channelmgnt plug-in for SopelMirahezeBots sopel-channelmgnt · sopel-plugins-channelmgnt
- CVE-2020-17417This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811.Foxit Reader
- CVE-2020-17414This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798.Foxit Reader
- CVE-2020-17415This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798.Foxit PhantomPDF
- CVE-2020-17416This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798.Foxit Reader
- CVE-2020-17412This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798.Foxit PhantomPDF
- CVE-2020-17413This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798.Foxit PhantomPDF
- CVE-2020-17410This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798.Foxit PhantomPDF
- CVE-2020-17406This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112Microhard Bullet-LTE
- CVE-2020-16124Integer overflow in ROS communications libraryopenrobotics ros_comm ROS communications packages
- CVE-2020-7743Prototype Pollutionmathjs
Medium, low and unrated 11
- CVE-2020-12911A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g.AMD Graphics Driver for Windows
- CVE-2020-12928A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT autAMD Ryzen Master
- CVE-2020-12933A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g.AMD Graphics Driver for Windows
- CVE-2020-25645A flaw was found in the Linux kernel in versions before 5.9-rc7.kernel
- CVE-2020-13957Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for Apache Solr · org.apache.solr:solr-parent +2
- CVE-2018-20243The implementation of POST with the username and password in the URL parameters exposed the credentials.Apache Fineract
- CVE-2020-17411This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798.Foxit PhantomPDF
- CVE-2020-17409This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6NETGEAR Multiple Routers
- CVE-2020-25779Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) coulTrend Micro Antivirus for Mac
- CVE-2020-15797A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590.Siemens DCA Vantage Analyzer
- CVE-2020-7590A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590.Siemens DCA Vantage Analyzer