CVEs published November 2, 2020
47 CVEs were published on November 2, 2020: 0 critical, 1 high.
- Published
- 47
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 45
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 21
- QNAP Systems Music Station
- 3
- QNAP Systems Photo Station
- 3
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 2
- browserless-chrome
- 1
- droppy
- 1
- github.com/ipfs/go-ipfs
- 1
- JUUKO K-800
- 1
- JUUKO K-808
- 1
- org.bouncycastle:bcprov-jdk14 · org.bouncycastle:bcprov-… +6
- 1
High 1
Medium, low and unrated 46
- CVE-2020-9861A stack overflow issue existed in Swift for Linux.Swift 5.1.5 for Linux
- CVE-2020-26939In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponentorg.bouncycastle:bcprov-jdk14 · org.bouncycastle:bcprov-… +6
- CVE-2020-23868NeDi 1.9C allows inc/rt-popup.php d XSS.
- CVE-2020-23989NeDi 1.9C allows pwsec.php oid XSS.
- CVE-2020-7757Path Traversaldroppy
- CVE-2020-23639A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to ex
- CVE-2020-9368The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via
- CVE-2020-14425Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.
- CVE-2020-10937An issue was discovered in IPFS (aka go-ipfs) 0.4.23.github.com/ipfs/go-ipfs
- CVE-2018-17932JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, whicJUUKO K-800
- CVE-2018-19025In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (FirmwareJUUKO K-808
- CVE-2018-19956The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station.QNAP Systems Photo Station
- CVE-2018-19955The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station.QNAP Systems Photo Station
- CVE-2018-19954The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station.QNAP Systems Photo Station
- CVE-2018-19952If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information.QNAP Systems Music Station
- CVE-2018-19951If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.QNAP Systems Music Station
- CVE-2018-19950If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands.QNAP Systems Music Station
- CVE-2020-24881SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.
- CVE-2020-3704u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral syQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3696u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking securitQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-3703u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from centralQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3693u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3694u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Mo…
- CVE-2020-3684u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them witQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3690u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3692u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parametersQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3673u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the indQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3678u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon ConsumerQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2020-3657u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client thQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3670u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3638u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3654u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11173u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11174u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11164u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in SnapdragoQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2020-11169u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11172u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in SnapdraQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11157u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in SQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2020-11162u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11155u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon AutoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11156u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11153u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution'Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11154u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11114u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a craftQualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…
- CVE-2020-11125u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon AuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11141u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer devicQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…