CVEs published October 16, 2020
200 CVEs were published on October 16, 2020: 0 critical, 90 high. 2 are now in CISA KEV.
- Published
- 200
- Critical
- 0
- High
- 90
- Medium
- 42
- Low
- 0
- Unrated
- 68
- Now in CISA KEV
- 2
- Fix available
- 82
Most affected products
- Microsoft Windows
- 54
- Juniper Networks Junos OS
- 25
- Apple iOS · Apple macOS +2
- 9
- Apple iOS · Apple tvOS +4
- 8
- Apple iOS
- 5
- Microsoft Office · Microsoft 365 Apps for Enterprise +1
- 5
- Microsoft SharePoint Enterprise Server · Microsoft Share… +2
- 5
- Apple Safari
- 4
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 4
- Apple iOS · Apple tvOS +1
- 3
High 90
- CVE-2020-1167Microsoft Graphics Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1243Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1047Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1080Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17022Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-17023Visual Studio JSON Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2020-16995Network Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege VulnerabilityMicrosoft Network Watcher Agent virtual machine extension f…
- CVE-2020-17003Base3D Remote Code Execution VulnerabilityMicrosoft 3D Viewer
- CVE-2020-16977Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2020-16980Windows iSCSI Target Service Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-16975Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16976Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16973Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16974Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16969Microsoft Exchange Information Disclosure VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2020-16972Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16967Windows Camera Codec Pack Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16968Windows Camera Codec Pack Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16955Microsoft Office Click-to-Run Elevation of Privilege VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft Office +1
- CVE-2020-16957Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-16954Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-16951Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-16952Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-16945Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-16946Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-16944Microsoft SharePoint Reflective XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-16939Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16940Windows - User Profile Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16935Windows COM Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16936Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16932Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-16933Microsoft Word Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-16934Microsoft Office Click-to-Run Elevation of Privilege VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft Office +1
- CVE-2020-16930Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-16931Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-16928Microsoft Office Click-to-Run Elevation of Privilege VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft Office +1
- CVE-2020-16929Microsoft Excel Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +3
- CVE-2020-16924Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16927Windows Remote Desktop Protocol (RDP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-16923Microsoft Graphics Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16920Windows Application Compatibility Client Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16916Windows COM Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16918Base3D Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft 3D Viewer
- CVE-2020-16915Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-16912Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16913Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16911GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16908Windows Setup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16909Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16907Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16902Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16899Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-16900Windows Event System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16898Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16895Windows Error Reporting Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16896Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16892Windows Image Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16894Windows NAT Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-16890Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16891Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-16887Windows Network Connections Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16885Windows Storage VSP Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16876Windows Application Compatibility Client Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16877Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0764Windows Storage Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16863Windows Remote Desktop Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1686Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.Juniper Networks Junos OS
- CVE-2020-1684Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.Juniper Networks Junos OS
- CVE-2020-1683Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP pollingJuniper Networks Junos OS
- CVE-2020-1679Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.Juniper Networks Junos OS
- CVE-2020-1677Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.Juniper Networks MIST Cloud UI
- CVE-2020-1676Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.Juniper Networks MIST Cloud UI
- CVE-2020-1675Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.Juniper Networks MIST Cloud UI
- CVE-2020-1673Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) servicesJuniper Networks Junos OS
- CVE-2020-1672Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.Juniper Networks Junos OS
- CVE-2020-1671Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.Juniper Networks Junos OS
- CVE-2020-1667Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.Juniper Networks Junos OS
- CVE-2020-1664Junos OS: Buffer overflow vulnerability in device control daemonJuniper Networks Junos OS
- CVE-2020-1662Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.Juniper Networks Junos OS
- CVE-2020-1660Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.Juniper Networks Junos OS
- CVE-2020-1657Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.Juniper Networks Junos OS
- CVE-2020-1656Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.Juniper Networks Junos OS
- CVE-2020-15254Undefined Behavior in bounded Crossbeam channelcrossbeam-rs crossbeam · crossbeam-channel
- CVE-2020-15252RCE in XWikixwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2020-15258Insecure use of shell.openExternal in Wirewireapp wire-desktop
- CVE-2020-9907A memory corruption issue was addressed by removing the vulnerable code.Apple iOS · Apple tvOS
- CVE-2020-4636IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting.IBM Resilient OnPrem
- CVE-2020-15255CSV injection in Anuko Time Trackeranuko timetracker
- CVE-2020-27176Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution.
- CVE-2020-16947Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
Medium, low and unrated 110
- CVE-2020-16978Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16956Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16953Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-16949Microsoft Outlook Denial of Service VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-16950Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server
- CVE-2020-16948Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-16943Dynamics 365 Commerce Elevation of Privilege VulnerabilityMicrosoft Dynamics 365 Commerce
- CVE-2020-16941Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-16942Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-16938Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16937.NET Framework Information Disclosure VulnerabilityMicrosoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 ·…
- CVE-2020-16922Windows Spoofing VulnerabilityMicrosoft Windows
- CVE-2020-16919Windows Enterprise App Management Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16921Windows Text Services Framework Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16914Windows GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16910Windows Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-16905Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16904Azure Functions Elevation of Privilege VulnerabilityMicrosoft Azure Functions
- CVE-2020-16901Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16897NetBT Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16889Windows KernelStream Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16886PowerShellGet Module WDAC Security Feature Bypass VulnerabilityMicrosoft PowerShellGet
- CVE-2020-1689Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configurationJuniper Networks Junos OS
- CVE-2020-1688Junos OS: SRX and NFX Series: Insufficient Web API private key protectionJuniper Networks Junos OS
- CVE-2020-1687Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.Juniper Networks Junos OS
- CVE-2020-1685Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard actionJuniper Networks Junos OS
- CVE-2020-1682Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI commandJuniper Networks Junos OS
- CVE-2020-1681Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of ServiceJuniper Networks Junos OS Evolved
- CVE-2020-1680Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.Juniper Networks Junos OS
- CVE-2020-1678Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.Juniper Networks Junos OS
- CVE-2020-1670Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packetsJuniper Networks Junos OS
- CVE-2020-1669Junos OS: NFX350: Password hashes stored in world-readable formatJuniper Networks Junos OS
- CVE-2020-1668Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interfaceJuniper Networks Junos OS
- CVE-2020-1666Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnectionJuniper Networks Junos OS Evolved
- CVE-2020-1665Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.Juniper Networks Junos OS
- CVE-2020-1661Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.Juniper Networks Junos OS
- CVE-2020-27194An issue was discovered in the Linux kernel before 5.8.15.
- CVE-2020-25214In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint.
- CVE-2019-12305In EZCast Pro II, the administrator password md5 hash is provided upon a web request.
- CVE-2020-26183Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability.Dell NetWorker
- CVE-2020-26182Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability.Dell NetWorker
- CVE-2020-9992This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7.Apple iOS · Apple Xcode
- CVE-2020-9983An out-of-bounds write issue was addressed with improved bounds checking.Apple Safari
- CVE-2020-9976A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +1
- CVE-2020-9968A logic issue was addressed with improved restrictions.Apple iOS · Apple macOS +2
- CVE-2020-9964A memory initialization issue was addressed with improved memory handling.Apple iOS
- CVE-2020-9959A lock screen issue allowed access to messages on a locked device.Apple iOS
- CVE-2020-9958An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS
- CVE-2020-9952An input validation issue was addressed with improved input validation.Apple iOS · Apple tvOS +3
- CVE-2020-9951A use after free issue was addressed with improved memory management.Apple Safari
- CVE-2020-9946This issue was addressed with improved checks.Apple iOS · Apple watchOS
- CVE-2020-9948A type confusion issue was addressed with improved memory handling.Apple Safari
- CVE-2020-9936An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +4
- CVE-2020-9934An issue existed in the handling of environment variables.Apple iOS · Apple macOS
- CVE-2020-9933An authorization issue was addressed with improved state management.Apple iOS · Apple tvOS +1
- CVE-2020-9931A denial of service issue was addressed with improved input validation.Apple iOS
- CVE-2020-9925A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +4
- CVE-2020-9923A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple watchOS
- CVE-2020-9918An out-of-bounds read was addressed with improved input validation.Apple macOS · Apple tvOS +1
- CVE-2020-9917This issue was addressed with improved checks.Apple iOS
- CVE-2020-9916A URL Unicode encoding issue was addressed with improved state management.Apple iOS · Apple tvOS +4
- CVE-2020-9915An access issue existed in Content Security Policy.Apple iOS · Apple tvOS +4
- CVE-2020-9914An input validation issue existed in Bluetooth.Apple iOS · Apple tvOS
- CVE-2020-9913This issue was addressed with improved data protection.Apple macOS
- CVE-2020-15157containerd can be coerced into leaking credentials during image pullcontainerd · github.com/containerd/containerd
- CVE-2020-9912A logic issue was addressed with improved restrictions.Apple Safari
- CVE-2020-9911A logic issue was addressed with improved restrictions.Apple iOS · Apple Safari
- CVE-2020-9910Multiple issues were addressed with improved logic.Apple iOS · Apple tvOS +4
- CVE-2020-9909An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple tvOS +1
- CVE-2020-9903A logic issue was addressed with improved restrictions.Apple iOS · Apple Safari
- CVE-2020-9895A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +4
- CVE-2020-9894An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple tvOS +4
- CVE-2020-4254IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to IBM Security Guardium Big Data Intelligence
- CVE-2020-9893A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +4
- CVE-2020-9891An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9890An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9889An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9888An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9885An issue existed in the handling of iMessage tapbacks.Apple iOS · Apple macOS +2
- CVE-2020-9884An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9878A buffer overflow issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2020-9870A logic issue was addressed with improved validation.Apple iOS · Apple macOS +1
- CVE-2020-9865A memory corruption issue was addressed by removing the vulnerable code.Apple iOS · Apple macOS +2
- CVE-2020-9864A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2020-9862A command injection issue existed in Web Inspector.Apple iOS · Apple tvOS +4
- CVE-2020-9799An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2020-27178Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret keys with Google Authenorg.apereo.cas:cas-server-webapp · org.apereo.cas:cas-serve…
- CVE-2020-26672Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php.
- CVE-2020-24408Stored XSS in customer address upload featureAdobe Magento Commerce · magento/community-edition
- CVE-2020-26682In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
- CVE-2020-3991VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue duVMware Horizon Client for Windows
- CVE-2020-26944An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows.
- CVE-2020-14299A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy Picketpicketbox
- CVE-2020-16270OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS.
- CVE-2020-15867The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution.
- CVE-2020-14144The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the docode.gitea.io/gitea
- CVE-2019-19885In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.
- CVE-2020-26893An issue was discovered in ClamXAV 3 before 3.1.1.
- CVE-2019-19513The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability.
- CVE-2019-18796The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafte
- CVE-2019-18795The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file.
- CVE-2019-18794The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file.
- CVE-2020-26943An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0.blazar-dashboard
- CVE-2020-26584An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.
- CVE-2020-26583An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.
- CVE-2020-25829An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5.
- CVE-2020-24352An issue was discovered in QEMU through 5.1.0.
- CVE-2020-27174In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when da
- CVE-2020-27173In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard
- CVE-2020-27163phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.