Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2020

70 records · 14 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-15227
    49Plan

    Remote Code Execution vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    nette · applicationOct 1, 2020

  • CVE-2020-15663
    36Monitor

    If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location wi

    HighCVSS 8.8No exploitEPSS 2%

    mozilla · firefoxOct 1, 2020

  • CVE-2020-12124
    61This week

    A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an atta

    CriticalCVSS 9.8Proof of conceptEPSS 74%

    wavlink · wn530h4 firmwareOct 2, 2020

  • CVE-2020-26124
    55Plan

    openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.

    HighCVSS 8.8WeaponizedEPSS 66%

    openmediavault · openmediavaultOct 2, 2020

  • CVE-2020-24397
    33Monitor

    An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534.

    HighCVSS 7.2No exploitEPSS 15%

    zohocorp · manageengine desktop centralOct 2, 2020

  • CVE-2020-26525
    44Plan

    Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter.

    CriticalCVSS 9.1Proof of conceptEPSS 25%

    damstratechnology · smart assetOct 2, 2020

  • CVE-2020-24214
    50Plan

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    szuray · iptv\/h.264 video encoder firmwareOct 6, 2020

  • CVE-2020-24215
    45Plan

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    szuray · iptv\/h.264 video encoder firmwareOct 6, 2020

  • CVE-2020-24217
    51Plan

    An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    szuray · iptv\/h.264 video encoder firmwareOct 6, 2020

  • CVE-2020-24219
    37Monitor

    An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97.

    HighCVSS 7.5Proof of conceptEPSS 23%

    szuray · iptv\/h.264 video encoder firmwareOct 6, 2020

  • CVE-2020-15927
    47Plan

    Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP mo

    HighCVSS 8.8No exploitEPSS 41%

    zohocorp · manageengine applications managerOct 6, 2020

  • CVE-2020-16267
    47Plan

    Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA mo

    HighCVSS 8.8No exploitEPSS 41%

    zohocorp · manageengine applications managerOct 6, 2020

  • CVE-2020-26876
    33Monitor

    The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materi

    HighCVSS 7.5Proof of conceptEPSS 10%

    wpcoursesplugin · wp-coursesOct 7, 2020

  • CVE-2020-15175
    57Plan

    Unauthenticated File Deletion in GLPI

    CriticalCVSS 9.1Proof of conceptEPSS 71%

    glpi-project · glpiOct 7, 2020

  • CVE-2020-26567
    27Monitor

    An issue was discovered on D-Link DSR-250N before 3.17B devices.

    MediumCVSS 5.5Proof of conceptEPSS 16%

    dlink · dsr-250n firmwareOct 8, 2020

  • CVE-2020-13340
    54Plan

    An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log

    HighCVSS 8.7No exploitEPSS 66%

    gitlab · gitlabOct 8, 2020

  • CVE-2020-4280
    57Plan

    IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of

    HighCVSS 8.8No exploitEPSS 72%

    ibm · qradar security information and event managerOct 8, 2020

  • CVE-2020-26919
    86Now

    NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

    CriticalCVSS 9.8KEVWeaponizedEPSS 57%

    netgear · jgs516pe firmwareOct 9, 2020

  • CVE-2020-26935
    59Plan

    An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.

    CriticalCVSS 9.8Proof of conceptEPSS 65%

    phpmyadmin · phpmyadminOct 10, 2020

  • CVE-2020-26948
    65This week

    Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

    CriticalCVSS 9.8WeaponizedEPSS 87%

    emby · embyOct 10, 2020

  • CVE-2020-5135
    77This week

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code

    CriticalCVSS 9.8KEVWeaponizedEPSS 26%

    sonicwall · sonicosOct 12, 2020

  • CVE-2020-8821
    45Plan

    An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint.

    MediumCVSS 5.4No exploitEPSS 79%

    webmin · webminOct 12, 2020

  • CVE-2020-13943
    33Monitor

    If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum nu

    MediumCVSS 4.3No exploitEPSS 54%

    apache · tomcatOct 12, 2020

  • CVE-2019-17444
    60This week

    JFrog Artifactory does not enforce default admin password change

    CriticalCVSS 9.8Proof of conceptEPSS 69%

    jfrog · artifactoryOct 12, 2020

  • CVE-2020-17410
    35Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798.

    HighCVSS 7.8No exploitEPSS 12%

    foxitsoftware · foxit readerOct 13, 2020

  • CVE-2020-17416
    35Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798.

    HighCVSS 7.8No exploitEPSS 12%

    foxitsoftware · foxit readerOct 13, 2020

  • CVE-2020-17417
    35Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811.

    HighCVSS 7.8No exploitEPSS 12%

    foxitsoftware · foxit readerOct 13, 2020

  • CVE-2020-13957
    63This week

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for

    CriticalCVSS 9.8Proof of conceptEPSS 79%

    apache · solrOct 13, 2020

  • CVE-2020-12503
    35Monitor

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    HighCVSS 7.2No exploitEPSS 22%

    pepperl-fuchs · es7510-xt firmwareOct 15, 2020

  • CVE-2020-14144
    57Plan

    The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the do

    HighCVSS 7.2WeaponizedEPSS 95%

    gitea · giteaOct 16, 2020

  • CVE-2020-15867
    54Plan

    The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution.

    HighCVSS 7.2WeaponizedEPSS 87%

    gogs · gogsOct 16, 2020

  • CVE-2020-16270
    28Monitor

    OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS.

    MediumCVSS 6.1Proof of conceptEPSS 13%

    olimpoks · olimpokOct 16, 2020

  • CVE-2020-9907
    62This week

    A memory corruption issue was addressed by removing the vulnerable code.

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    apple · ipadosOct 16, 2020

  • CVE-2020-9934
    53Plan

    An issue existed in the handling of environment variables.

    MediumCVSS 5.5KEVWeaponizedEPSS 3%

    apple · ipadosOct 16, 2020

  • CVE-2020-16896
    34Monitor

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows 10Oct 16, 2020

  • CVE-2020-16898
    38Monitor

    Windows TCP/IP Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 10%

    microsoft · windows 10Oct 16, 2020

  • CVE-2020-16899
    34Monitor

    Windows TCP/IP Denial of Service Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 13%

    microsoft · windows 10Oct 16, 2020

  • CVE-2020-16947
    40Plan

    Microsoft Outlook Remote Code Execution Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 33%

    microsoft · 365 appsOct 16, 2020

  • CVE-2020-16952
    60This week

    Microsoft SharePoint Remote Code Execution Vulnerability

    HighCVSS 8.6WeaponizedEPSS 71%

    microsoft · sharepoint enterprise serverOct 16, 2020

  • CVE-2020-24648
    42Plan

    A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Managem

    CriticalCVSS 9.8No exploitEPSS 10%

    hp · intelligent management centerOct 19, 2020

  • CVE-2020-13937
    44Plan

    Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3

    MediumCVSS 5.3Proof of conceptEPSS 78%

    apache · kylinOct 19, 2020

  • CVE-2020-15261
    29Monitor

    Unquoted service path vulnerability on Veyon

    MediumCVSS 6.7Proof of conceptEPSS 11%

    veyon · veyonOct 19, 2020

  • CVE-2020-6308
    40Plan

    SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated attacker to inject arb

    MediumCVSS 5.3Proof of conceptEPSS 61%

    sap · businessobjects business intelligence platformOct 20, 2020

  • CVE-2020-3992
    94Now

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a

    CriticalCVSS 9.8KEVWeaponizedEPSS 83%

    vmware · cloud foundationOct 20, 2020

  • CVE-2020-5791
    52Plan

    Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute op

    HighCVSS 7.2WeaponizedEPSS 78%

    nagios · nagios xiOct 20, 2020

  • CVE-2020-5792
    46Plan

    Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitra

    HighCVSS 7.2WeaponizedEPSS 58%

    nagios · nagios xiOct 20, 2020

  • CVE-2020-25820
    29Monitor

    BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document th

    MediumCVSS 6.5Proof of conceptEPSS 10%

    bigbluebutton · bigbluebuttonOct 21, 2020

  • CVE-2020-14825
    48Plan

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8No exploitEPSS 30%

    oracle · weblogic serverOct 21, 2020

  • CVE-2020-14841
    55Plan

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8No exploitEPSS 52%

    oracle · weblogic serverOct 21, 2020

  • CVE-2020-14864
    89Now

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation).

    HighCVSS 7.5KEVWeaponizedEPSS 97%

    oracle · business intelligenceOct 21, 2020

  • CVE-2020-14871
    94Now

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module).

    CriticalCVSS 10.0KEVWeaponizedEPSS 80%

    oracle · solarisOct 21, 2020

  • CVE-2020-14882
    99Now

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    oracle · weblogic serverOct 21, 2020

  • CVE-2020-14883
    87Now

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    HighCVSS 7.2KEVWeaponizedEPSS 97%

    oracle · weblogic serverOct 21, 2020

  • CVE-2020-3580
    80Now

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    MediumCVSS 6.1KEVWeaponizedEPSS 85%

    cisco · secure firewall threat defenseOct 21, 2020

  • CVE-2020-27615
    60This week

    The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip

    CriticalCVSS 9.8WeaponizedEPSS 52%

    loginizer · loginizerOct 21, 2020

  • CVE-2020-15906
    47Plan

    tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.

    CriticalCVSS 9.8Proof of conceptEPSS 27%

    tiki · tikiOct 22, 2020

  • CVE-2020-11853
    58Plan

    Arbitrary code execution vulnerability on multiple Micro Focus products

    HighCVSS 8.8WeaponizedEPSS 76%

    microfocus · operation bridge managerOct 22, 2020

  • CVE-2020-26561
    39Monitor

    Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in

    HighCVSS 8.8No exploitEPSS 11%

    belkin · linksys wrt 160nl firmwareOct 23, 2020

  • CVE-2020-26878
    38Monitor

    Ruckus through 1.5.1.0.21 is affected by remote command injection.

    HighCVSS 8.8Proof of conceptEPSS 11%

    commscope · ruckus vriotOct 26, 2020

  • CVE-2020-26879
    53Plan

    Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py.

    CriticalCVSS 9.8Proof of conceptEPSS 45%

    commscope · ruckus vriotOct 26, 2020

  • CVE-2020-8956
    40Plan

    Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

    LowCVSS 3.3WeaponizedEPSS 1%

    pulsesecure · pulse secure desktopOct 27, 2020

  • CVE-2020-11854
    61This week

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    CriticalCVSS 9.8WeaponizedEPSS 74%

    microfocus · application performance managementOct 27, 2020

  • CVE-2020-11858
    40Plan

    Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

    HighCVSS 7.8WeaponizedEPSS 2%

    microfocus · operations bridgeOct 27, 2020

  • CVE-2020-8260
    87Now

    A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code e

    HighCVSS 7.2KEVWeaponizedEPSS 96%

    ivanti · connect secureOct 28, 2020

  • CVE-2018-19943
    57Plan

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

    MediumCVSS 5.4KEVWeaponizedEPSS 21%

    qnap · qtsOct 28, 2020

  • CVE-2018-19949
    78This week

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands.

    CriticalCVSS 9.8KEVWeaponizedEPSS 28%

    qnap · qtsOct 28, 2020

  • CVE-2018-19953
    63This week

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

    MediumCVSS 6.1KEVWeaponizedEPSS 28%

    qnap · qtsOct 28, 2020

  • CVE-2020-27986
    35Monitor

    SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI.

    HighCVSS 7.5Proof of conceptEPSS 15%

    sonarsource · sonarqubeOct 28, 2020

  • CVE-2020-7384
    40Plan

    Client-Side Command Injection in Rapid7 Metasploit

    HighCVSS 7.8WeaponizedEPSS 30%

    rapid7 · metasploitOct 29, 2020

  • CVE-2020-7373
    53Plan

    vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel

    CriticalCVSS 9.8No exploitEPSS 45%

    vbulletin · vbulletinOct 30, 2020