# CVEs published 2020-10-27

171 CVEs were published on October 27, 2020: 1 critical, 5 high. Days are UTC.

- [CVE-2020-16140](https://cve.now/CVE-2020-16140.md): The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS. (no CVSS)
- [CVE-2019-8796](https://cve.now/CVE-2019-8796.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8664](https://cve.now/CVE-2019-8664.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8531](https://cve.now/CVE-2019-8531.md): A validation issue existed in Trust Anchor Management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-9982](https://cve.now/CVE-2020-9982.md): This issue was addressed with improved checks to prevent unauthorized actions. (no CVSS, Apple Music for Android)
- [CVE-2020-9973](https://cve.now/CVE-2020-9973.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9941](https://cve.now/CVE-2020-9941.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-9932](https://cve.now/CVE-2020-9932.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2020-9979](https://cve.now/CVE-2020-9979.md): A trust issue was addressed by removing a legacy API. (no CVSS, Apple tvOS · Apple iOS and iPadOS)
- [CVE-2020-9857](https://cve.now/CVE-2020-9857.md): An issue existed in the parsing of URLs. (no CVSS, Apple macOS)
- [CVE-2020-3880](https://cve.now/CVE-2020-3880.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-9782](https://cve.now/CVE-2020-9782.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2020-9961](https://cve.now/CVE-2020-9961.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3863](https://cve.now/CVE-2020-3863.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-9866](https://cve.now/CVE-2020-9866.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9860](https://cve.now/CVE-2020-9860.md): A custom URL scheme handling issue was addressed with improved input validation. (no CVSS, Apple Safari)
- [CVE-2020-9786](https://cve.now/CVE-2020-9786.md): This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Updat (no CVSS, Apple macOS)
- [CVE-2020-3851](https://cve.now/CVE-2020-3851.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2020-27890](https://cve.now/CVE-2020-27890.md): The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes N (no CVSS)
- [CVE-2020-27891](https://cve.now/CVE-2020-27891.md): The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Con (no CVSS)
- [CVE-2020-27892](https://cve.now/CVE-2020-27892.md): The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands (no CVSS)
- [CVE-2020-3855](https://cve.now/CVE-2020-3855.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9774](https://cve.now/CVE-2020-9774.md): An issue existed with Siri Suggestions access to encrypted data. (no CVSS, Apple macOS)
- [CVE-2019-8858](https://cve.now/CVE-2019-8858.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-3864](https://cve.now/CVE-2020-3864.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2019-8855](https://cve.now/CVE-2019-8855.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2019-8854](https://cve.now/CVE-2019-8854.md): A user privacy issue was addressed by removing the broadcast MAC address. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2020-3852](https://cve.now/CVE-2020-3852.md): A logic issue was addressed with improved validation. (no CVSS, Apple Safari)
- [CVE-2019-8898](https://cve.now/CVE-2019-8898.md): An information disclosure issue existed in the handling of the Storage Access API. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2019-8901](https://cve.now/CVE-2019-8901.md): This issue was addressed by verifying host keys when connecting to a previously-known SSH server. (no CVSS, Apple iOS and iPadOS)
- [CVE-2019-8853](https://cve.now/CVE-2019-8853.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8846](https://cve.now/CVE-2019-8846.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2019-8850](https://cve.now/CVE-2019-8850.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2019-8857](https://cve.now/CVE-2019-8857.md): The issue was addressed with improved validation when an iCloud Link is created. (no CVSS, Apple iOS and iPadOS)
- [CVE-2019-8856](https://cve.now/CVE-2019-8856.md): An API issue existed in the handling of outgoing phone calls initiated with Siri. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8848](https://cve.now/CVE-2019-8848.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8852](https://cve.now/CVE-2019-8852.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8847](https://cve.now/CVE-2019-8847.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-25765](https://cve.now/CVE-2020-25765.md): Addressed remote code execution vulnerability in reg\_device.php due to insufficient validation of user input.in Western Digital My Cloud Dev (no CVSS)
- [CVE-2019-8851](https://cve.now/CVE-2019-8851.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8836](https://cve.now/CVE-2019-8836.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2019-8838](https://cve.now/CVE-2019-8838.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8842](https://cve.now/CVE-2019-8842.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8839](https://cve.now/CVE-2019-8839.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8844](https://cve.now/CVE-2019-8844.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple watchOS +4)
- [CVE-2019-8841](https://cve.now/CVE-2019-8841.md): An information disclosure issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS and iPadOS)
- [CVE-2019-8833](https://cve.now/CVE-2019-8833.md): A memory corruption issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8840](https://cve.now/CVE-2019-8840.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple Xcode)
- [CVE-2019-8832](https://cve.now/CVE-2019-8832.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8837](https://cve.now/CVE-2019-8837.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2019-8830](https://cve.now/CVE-2019-8830.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple iOS +1)
- [CVE-2019-8835](https://cve.now/CVE-2019-8835.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2019-8834](https://cve.now/CVE-2019-8834.md): A configuration issue was addressed with additional restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8828](https://cve.now/CVE-2019-8828.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8827](https://cve.now/CVE-2019-8827.md): The HTTP referrer header may be used to leak browsing history. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2019-8831](https://cve.now/CVE-2019-8831.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2019-8829](https://cve.now/CVE-2019-8829.md): A memory corruption vulnerability was addressed with improved locking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8826](https://cve.now/CVE-2019-8826.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8824](https://cve.now/CVE-2019-8824.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8780](https://cve.now/CVE-2019-8780.md): The issue was addressed with improved permissions logic. (no CVSS, Apple iOS and iPadOS · Apple tvOS)
- [CVE-2019-8825](https://cve.now/CVE-2019-8825.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8809](https://cve.now/CVE-2019-8809.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2020-27159](https://cve.now/CVE-2020-27159.md): Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in (no CVSS)
- [CVE-2019-8777](https://cve.now/CVE-2019-8777.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple macOS)
- [CVE-2019-8799](https://cve.now/CVE-2019-8799.md): This issue was resolved by replacing device names with a random identifier. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2019-8767](https://cve.now/CVE-2019-8767.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8774](https://cve.now/CVE-2019-8774.md): A resource exhaustion issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2019-8790](https://cve.now/CVE-2019-8790.md): This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. (no CVSS, Apple Swift for Ubuntu)
- [CVE-2019-8761](https://cve.now/CVE-2019-8761.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2019-8773](https://cve.now/CVE-2019-8773.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +4)
- [CVE-2019-8756](https://cve.now/CVE-2019-8756.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2019-8776](https://cve.now/CVE-2019-8776.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8771](https://cve.now/CVE-2019-8771.md): This issue was addressed with improved iframe sandbox enforcement. (no CVSS, Apple Safari · Apple iOS)
- [CVE-2019-8754](https://cve.now/CVE-2019-8754.md): A cross-origin issue existed with "iframe" elements. (no CVSS, Apple macOS)
- [CVE-2019-8751](https://cve.now/CVE-2019-8751.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +4)
- [CVE-2019-8749](https://cve.now/CVE-2019-8749.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2019-8762](https://cve.now/CVE-2019-8762.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple tvOS +3)
- [CVE-2019-8759](https://cve.now/CVE-2019-8759.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8744](https://cve.now/CVE-2019-8744.md): A memory corruption issue existed in the handling of IPv6 packets. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2020-27158](https://cve.now/CVE-2020-27158.md): Addressed remote code execution vulnerability in cgi\_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices p (no CVSS)
- [CVE-2019-8736](https://cve.now/CVE-2019-8736.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2019-8752](https://cve.now/CVE-2019-8752.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +4)
- [CVE-2019-8753](https://cve.now/CVE-2019-8753.md): This issue was addressed with improved checks. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2019-8728](https://cve.now/CVE-2019-8728.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iOS +4)
- [CVE-2019-8732](https://cve.now/CVE-2019-8732.md): The issue was addressed with improved data deletion. (no CVSS, Apple iOS)
- [CVE-2019-8746](https://cve.now/CVE-2019-8746.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2019-8740](https://cve.now/CVE-2019-8740.md): A memory corruption vulnerability was addressed with improved locking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2019-8712](https://cve.now/CVE-2019-8712.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iOS +1)
- [CVE-2019-8737](https://cve.now/CVE-2019-8737.md): A denial of service issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2019-8718](https://cve.now/CVE-2019-8718.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iOS +1)
- [CVE-2019-8734](https://cve.now/CVE-2019-8734.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iOS +4)
- [CVE-2019-8706](https://cve.now/CVE-2019-8706.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2019-8668](https://cve.now/CVE-2019-8668.md): A denial of service issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8715](https://cve.now/CVE-2019-8715.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8716](https://cve.now/CVE-2019-8716.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8709](https://cve.now/CVE-2019-8709.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple tvOS · Apple iOS +2)
- [CVE-2019-8645](https://cve.now/CVE-2019-8645.md): An issue existed in the handling of encrypted Mail. (no CVSS, Apple macOS)
- [CVE-2020-27160](https://cve.now/CVE-2020-27160.md): Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS dev (no CVSS)
- [CVE-2019-8708](https://cve.now/CVE-2019-8708.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8638](https://cve.now/CVE-2019-8638.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple watchOS +3)
- [CVE-2019-8696](https://cve.now/CVE-2019-8696.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8675](https://cve.now/CVE-2019-8675.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8633](https://cve.now/CVE-2019-8633.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8642](https://cve.now/CVE-2019-8642.md): An issue existed in the handling of S-MIME certificates. (no CVSS, Apple macOS)
- [CVE-2019-8612](https://cve.now/CVE-2019-8612.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8656](https://cve.now/CVE-2019-8656.md): This was addressed with additional checks by Gatekeeper on files mounted through a network share. (no CVSS, Apple macOS)
- [CVE-2019-8640](https://cve.now/CVE-2019-8640.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2019-8639](https://cve.now/CVE-2019-8639.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple watchOS +3)
- [CVE-2019-8588](https://cve.now/CVE-2019-8588.md): A null pointer dereference was addressed with improved input validation. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2019-8581](https://cve.now/CVE-2019-8581.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2019-8631](https://cve.now/CVE-2019-8631.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8570](https://cve.now/CVE-2019-8570.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8618](https://cve.now/CVE-2019-8618.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8580](https://cve.now/CVE-2019-8580.md): Source-routed IPv4 packets were disabled by default. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2020-12830](https://cve.now/CVE-2020-12830.md): Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthor (no CVSS)
- [CVE-2019-8592](https://cve.now/CVE-2019-8592.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8578](https://cve.now/CVE-2019-8578.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2019-8582](https://cve.now/CVE-2019-8582.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8572](https://cve.now/CVE-2019-8572.md): A null pointer dereference was addressed with improved input validation. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2019-8547](https://cve.now/CVE-2019-8547.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8579](https://cve.now/CVE-2019-8579.md): An input validation issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8573](https://cve.now/CVE-2019-8573.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8575](https://cve.now/CVE-2019-8575.md): The issue was addressed with improved data deletion. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2020-27888](https://cve.now/CVE-2020-27888.md): An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. (no CVSS)
- [CVE-2019-8538](https://cve.now/CVE-2019-8538.md): A denial of service issue was addressed with improved validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8569](https://cve.now/CVE-2019-8569.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8564](https://cve.now/CVE-2019-8564.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2019-8528](https://cve.now/CVE-2019-8528.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8534](https://cve.now/CVE-2019-8534.md): A logic issue existed resulting in memory corruption. (no CVSS, Apple macOS)
- [CVE-2019-8539](https://cve.now/CVE-2019-8539.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-7291](https://cve.now/CVE-2019-7291.md): A denial of service issue was addressed with improved memory handling. (no CVSS, Apple AirPort Base Station Firmware Update)
- [CVE-2019-8532](https://cve.now/CVE-2019-8532.md): A permissions issue was addressed by removing vulnerable code and adding additional checks. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8509](https://cve.now/CVE-2019-8509.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2019-8525](https://cve.now/CVE-2019-8525.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-7288](https://cve.now/CVE-2019-7288.md): The issue was addressed with improved validation on the FaceTime server. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2018-4474](https://cve.now/CVE-2018-4474.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-6238](https://cve.now/CVE-2019-6238.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple macOS)
- [CVE-2018-4467](https://cve.now/CVE-2018-4467.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2018-4448](https://cve.now/CVE-2018-4448.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2018-4452](https://cve.now/CVE-2018-4452.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2018-4468](https://cve.now/CVE-2018-4468.md): This issue was addressed by removing additional entitlements. (no CVSS, Apple macOS)
- [CVE-2018-4451](https://cve.now/CVE-2018-4451.md): This issue is fixed in macOS Mojave 10.14. (no CVSS, Apple macOS)
- [CVE-2018-4433](https://cve.now/CVE-2018-4433.md): A configuration issue was addressed with additional restrictions. (no CVSS, Apple iOS · Apple tvOS +2)
- [CVE-2018-4444](https://cve.now/CVE-2018-4444.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +2)
- [CVE-2018-4391](https://cve.now/CVE-2018-4391.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2018-4428](https://cve.now/CVE-2018-4428.md): A lock screen issue allowed access to the share function on a locked device. (no CVSS, Apple iOS)
- [CVE-2018-4381](https://cve.now/CVE-2018-4381.md): A resource exhaustion issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS)
- [CVE-2018-4390](https://cve.now/CVE-2018-4390.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2018-4339](https://cve.now/CVE-2018-4339.md): This issue was addressed with a new entitlement. (no CVSS, Apple iOS)
- [CVE-2018-4296](https://cve.now/CVE-2018-4296.md): This issue is fixed in macOS Mojave 10.14. (no CVSS, Apple macOS)
- [CVE-2020-15238](https://cve.now/CVE-2020-15238.md): Local privilege escalation Blueman (CVSS 7.1, blueman-project blueman)
- [CVE-2020-27853](https://cve.now/CVE-2020-27853.md): Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a for (no CVSS)
- [CVE-2020-7755](https://cve.now/CVE-2020-7755.md): Regular Expression Denial of Service (ReDoS) (CVSS 7.5, dat.gui)
- [CVE-2020-11858](https://cve.now/CVE-2020-11858.md): Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products. (CVSS 7.8, Micro Focus Operation Bridge)
- [CVE-2020-11854](https://cve.now/CVE-2020-11854.md): Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. (CVSS 9.8, Micro Focus Application Performance Management · Micro Focu…)
- [CVE-2020-7754](https://cve.now/CVE-2020-7754.md): Regular Expression Denial of Service (ReDoS) (CVSS 7.5, npm-user-validate)
- [CVE-2020-23945](https://cve.now/CVE-2020-23945.md): A SQL injection vulnerability exists in Victor CMS V1.0 in the cat\_id parameter of the category.php file. (no CVSS)
- [CVE-2020-6023](https://cve.now/CVE-2020-6023.md): Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware. (no CVSS, Check Point ZoneAlarm)
- [CVE-2020-6022](https://cve.now/CVE-2020-6022.md): Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. (no CVSS, Check Point ZoneAlarm)
- [CVE-2020-8579](https://cve.now/CVE-2020-8579.md): Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster L (no CVSS, clustered Data ONTAP)
- [CVE-2020-10256](https://cve.now/CVE-2020-10256.md): An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge (no CVSS)
- [CVE-2020-23864](https://cve.now/CVE-2020-23864.md): An issue exits in IOBit Malware Fighter version 8.0.2.547. (no CVSS)
- [CVE-2020-7753](https://cve.now/CVE-2020-7753.md): Regular Expression Denial of Service (ReDoS) (CVSS 7.5, trim)
- [CVE-2020-27179](https://cve.now/CVE-2020-27179.md): konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens. (no CVSS)
- [CVE-2020-27183](https://cve.now/CVE-2020-27183.md): A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user i (no CVSS)
- [CVE-2020-27182](https://cve.now/CVE-2020-27182.md): Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaS (no CVSS)
- [CVE-2020-27181](https://cve.now/CVE-2020-27181.md): A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset (no CVSS)
- [CVE-2020-27180](https://cve.now/CVE-2020-27180.md): konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter. (no CVSS)
- [CVE-2020-8956](https://cve.now/CVE-2020-8956.md): Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled. (CVSS 3.8)
- [CVE-2020-15352](https://cve.now/CVE-2020-15352.md): An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remo (no CVSS)
- [CVE-2018-21269](https://cve.now/CVE-2018-21269.md): checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.