CVEs published October 28, 2020
58 CVEs were published on October 28, 2020: 1 critical, 5 high. 4 are now in CISA KEV.
- Published
- 58
- Critical
- 1
- High
- 5
- Medium
- 2
- Low
- 0
- Unrated
- 50
- Now in CISA KEV
- 4
- Fix available
- 7
Most affected products
- Pulse Connect Secure / Pulse Policy Secure
- 5
- Pulse Secure Desktop Client
- 5
- QNAP Systems QTS
- 3
- SonicWall Global VPN Client
- 2
- Cog-Creators Red-DiscordBot · red-discordbot
- 1
- github.com/gophish/gophish
- 1
- github.com/grafana/grafana
- 1
- IBM Sterling Connect Direct for Microsoft Windows
- 1
- IBM WebSphere Application Server
- 1
- Mozilla Firefox
- 1
Critical 1
High 5
- CVE-2020-27986SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI.
- CVE-2018-19943If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.QNAP Systems QTS
- CVE-2020-15278Unauthorized privilege escalation in Mod moduleCog-Creators Red-DiscordBot · red-discordbot
- CVE-2020-4767IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused IBM Sterling Connect Direct for Microsoft Windows
- CVE-2020-8260A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code ePulse Connect Secure / Pulse Policy Secure
Medium, low and unrated 52
- CVE-2020-25374CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after
- CVE-2020-24707Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
- CVE-2020-24713Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
- CVE-2020-24711The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking atta
- CVE-2020-24710Gophish before 0.11.0 allows SSRF attacks.github.com/gophish/gophish
- CVE-2020-24712Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
- CVE-2020-24709Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
- CVE-2020-24708Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
- CVE-2020-24990An issue was discovered in QSC Q-SYS Core Manager 8.2.1.
- CVE-2020-25204The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.rec
- CVE-2020-27980Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter.
- CVE-2020-27739A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in u
- CVE-2020-27742An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's
- CVE-2020-27741Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or H
- CVE-2020-27740Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform.
- CVE-2018-19953If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.QNAP Systems QTS
- CVE-2020-25966Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured assets without proper
- CVE-2020-16259Winston 1.5.4 devices have an SSH user account with access from bastion hosts.
- CVE-2020-16258Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials.
- CVE-2020-16260Winston 1.5.4 devices do not enforce authorization.
- CVE-2020-16263Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins.
- CVE-2020-16262Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
- CVE-2020-16261Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access.
- CVE-2020-16256The API on Winston 1.5.4 devices is vulnerable to CSRF.
- CVE-2020-16257Winston 1.5.4 devices are vulnerable to command injection via the API.
- CVE-2020-4782IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system.IBM WebSphere Application Server
- CVE-2020-27978Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw.
- CVE-2020-27974NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS_SCM_BlockStart.php?code= XSS.
- CVE-2020-27975osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.
- CVE-2020-27976osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely.
- CVE-2020-22552The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No an
- CVE-2020-24303Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.github.com/grafana/grafana
- CVE-2020-8263A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site ScriptinPulse Connect Secure / Pulse Policy Secure
- CVE-2020-8262A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) anPulse Connect Secure / Pulse Policy Secure
- CVE-2020-8261A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.Pulse Connect Secure / Pulse Policy Secure
- CVE-2020-8241A vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to cPulse Secure Dektop Client
- CVE-2020-8255A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file rPulse Connect Secure / Pulse Policy Secure
- CVE-2020-8239A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack.Pulse Secure Desktop Cient
- CVE-2020-8254A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicioPulse Secure Desktop Client
- CVE-2020-8240A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges iPulse Secure Desktop Client
- CVE-2020-8250A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.Pulse Secure Desktop Client
- CVE-2020-8249A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow.Pulse Secure Desktop Client
- CVE-2020-8248A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.Pulse Secure Desktop Client
- CVE-2020-5144SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded SonicWall Global VPN Client
- CVE-2020-5145SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability.SonicWall Global VPN Client
- CVE-2020-27957The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data.
- CVE-2020-27956An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote
- CVE-2020-26130Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66.
- CVE-2020-26131Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta.
- CVE-2020-26132An issue was discovered in Home DNS Server 0.10.
- CVE-2020-26133An issue was discovered in Dual DHCP DNS Server 7.40.
- CVE-2020-6829When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about theMozilla Firefox