CVEs published October 19, 2020
96 CVEs were published on October 19, 2020: 0 critical, 6 high.
- Published
- 96
- Critical
- 0
- High
- 6
- Medium
- 2
- Low
- 1
- Unrated
- 87
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- HPE Intelligent Management Center
- 64
- HUAWEI Mate
- 2
- Allen Bradley
- 1
- Allen-Bradley
- 1
- Apache Kylin · org.apache.kylin:kylin
- 1
- E6878-370;E6878-870
- 1
- Google Tink · tink +1
- 1
- HUAWEI Mate 30;HUAWEI P30
- 1
- Infinispan
- 1
- mariocasciaro object-path · object-path
- 1
High 6
- CVE-2020-15261Unquoted service path vulnerability on Veyonveyon
- CVE-2020-15256Prototype pollution in object-pathmariocasciaro object-path · object-path
- CVE-2020-6085An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AAllen Bradley
- CVE-2020-6084An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AAllen-Bradley
- CVE-2020-15263XSS in platformorchidsoftware platform · orchid/platform
- CVE-2020-7745Malicious PackageMintegralAdSDK
Medium, low and unrated 90
- CVE-2020-15245Email verification bypass in SyliusSylius · sylius/sylius
- CVE-2020-10746A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both RESInfinispan
- CVE-2020-13937Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3Apache Kylin · org.apache.kylin:kylin
- CVE-2020-15262Invalid integrity hashes in webpack-subresource-integritywaysact webpack-subresource-integrity · webpack-subresource…
- CVE-2020-9111E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP11C233) have aE6878-370;E6878-870
- CVE-2020-9113HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module.HUAWEI Mate
- CVE-2020-9263HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after fHUAWEI Mate 30;HUAWEI P30
- CVE-2020-24388An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2.
- CVE-2020-24387An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2.
- CVE-2020-9092HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability.HUAWEI Mate
- CVE-2020-9112Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability.Taurus-AN00B
- CVE-2019-13633Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS.
- CVE-2020-11496Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code.
- CVE-2020-15822In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.
- CVE-2020-24375A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
- CVE-2020-16161GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData().
- CVE-2020-16160GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress().
- CVE-2020-16159GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData().
- CVE-2020-7195A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7194A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CHPE Intelligent Management Center
- CVE-2020-7193A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7192A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenteHPE Intelligent Management Center
- CVE-2020-7191A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) verHPE Intelligent Management Center
- CVE-2020-7190A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) vHPE Intelligent Management Center
- CVE-2020-7189A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management CeHPE Intelligent Management Center
- CVE-2020-7188A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenHPE Intelligent Management Center
- CVE-2020-7187A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7186A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenHPE Intelligent Management Center
- CVE-2020-7185A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) vHPE Intelligent Management Center
- CVE-2020-7184A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent ManagemeHPE Intelligent Management Center
- CVE-2020-7183A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCHPE Intelligent Management Center
- CVE-2020-7182A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versHPE Intelligent Management Center
- CVE-2020-7181A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7180A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iHPE Intelligent Management Center
- CVE-2020-7179A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeHPE Intelligent Management Center
- CVE-2020-7178A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7177A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-16158GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE().
- CVE-2020-7176A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeHPE Intelligent Management Center
- CVE-2020-7175A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center HPE Intelligent Management Center
- CVE-2020-7174A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iHPE Intelligent Management Center
- CVE-2020-7173A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center HPE Intelligent Management Center
- CVE-2020-7172A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7171A guidatadetail expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) HPE Intelligent Management Center
- CVE-2020-7170A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versionHPE Intelligent Management Center
- CVE-2020-7169A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7168A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCHPE Intelligent Management Center
- CVE-2020-7167A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center HPE Intelligent Management Center
- CVE-2020-7166A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent ManagemHPE Intelligent Management Center
- CVE-2020-7165A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7164A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCHPE Intelligent Management Center
- CVE-2020-7163A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) vHPE Intelligent Management Center
- CVE-2020-7162A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management HPE Intelligent Management Center
- CVE-2020-7161A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7160A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenteHPE Intelligent Management Center
- CVE-2020-7159A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7158A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7157A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iHPE Intelligent Management Center
- CVE-2020-7156A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iHPE Intelligent Management Center
- CVE-2020-7155A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versionHPE Intelligent Management Center
- CVE-2020-7154A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7153A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7152A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) HPE Intelligent Management Center
- CVE-2020-7151A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7150A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeHPE Intelligent Management Center
- CVE-2020-7149A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7148A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterHPE Intelligent Management Center
- CVE-2020-7147A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center HPE Intelligent Management Center
- CVE-2020-7146A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7145A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)HPE Intelligent Management Center
- CVE-2020-7144A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (HPE Intelligent Management Center
- CVE-2020-7143A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMHPE Intelligent Management Center
- CVE-2020-7142A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iHPE Intelligent Management Center
- CVE-2020-7141A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCHPE Intelligent Management Center
- CVE-2020-24652A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center HPE Intelligent Management Center
- CVE-2020-24651A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CentHPE Intelligent Management Center
- CVE-2020-24650A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versionHPE Intelligent Management Center
- CVE-2020-24649A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management CenHPE Intelligent Management Center
- CVE-2020-24648A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent ManagemHPE Intelligent Management Center
- CVE-2020-24647A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) HPE Intelligent Management Center
- CVE-2020-24646A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versiHPE Intelligent Management Center
- CVE-2020-24630A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s):HPE Intelligent Management Center
- CVE-2020-24629A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): PriorHPE Intelligent Management Center
- CVE-2020-26891AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter.matrix-synapse
- CVE-2020-24266An issue was discovered in tcpreplay tcpprep v4.3.3.
- CVE-2020-24265An issue was discovered in tcpreplay tcpprep v4.3.3.
- CVE-2020-15909SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access.
- CVE-2020-15910SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly.
- CVE-2020-13778rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxA
- CVE-2020-8929Ciphertext integrity weakness in TinkGoogle Tink · tink +1