CVE-2020-17355 21 Oct 2020
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of servi... Read more ➔
CVE-2020-17454 21 Oct 2020
WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS p... Read more ➔
CVE-2020-24421 21 Oct 2020
Adobe InDesign version 15.1.2 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .indd file, poten... Read more ➔
CVE-2020-15265 21 Oct 2020
In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessi... Read more ➔
CVE-2020-15266 21 Oct 2020
In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation rece... Read more ➔
CVE-2020-24418 21 Oct 2020
Adobe After Effects version 17.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .aepx file, which could res... Read more ➔
CVE-2020-24419 21 Oct 2020
Adobe After Effects version 17.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary c... Read more ➔
CVE-2020-24420 21 Oct 2020
Adobe Photoshop for Windows version 21.2.1 (and earlier) is affected by an uncontrolled search path element vulnerability that could result in arbitra... Read more ➔
CVE-2020-24423 21 Oct 2020
Adobe Media Encoder version 14.4 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary cod... Read more ➔
CVE-2020-24424 21 Oct 2020
Adobe Premiere Pro version 14.4 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the... Read more ➔
CVE-2020-24425 21 Oct 2020
Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Succe... Read more ➔
CVE-2020-27615 21 Oct 2020
The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip. Read more ➔
CVE-2020-15244 21 Oct 2020
In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to... Read more ➔
CVE-2020-24422 21 Oct 2020
Adobe Creative Cloud Desktop Application version 5.2 (and earlier) and 2.1 (and earlier) for Windows is affected by an uncontrolled search path vulner... Read more ➔
CVE-2020-9747 21 Oct 2020
Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary... Read more ➔
CVE-2020-9748 21 Oct 2020
Adobe Animate version 20.5 (and earlier) is affected by a stack overflow vulnerability, which could lead to arbitrary code execution in the context of... Read more ➔
CVE-2020-9749 21 Oct 2020
Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the conte... Read more ➔
CVE-2020-9750 21 Oct 2020
Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability, which could result in arbitrary code execution in the con... Read more ➔
CVE-2020-17381 21 Oct 2020
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker ca... Read more ➔
CVE-2020-3299 21 Oct 2020
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a... Read more ➔
CVE-2020-3304 21 Oct 2020
A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an un... Read more ➔
CVE-2020-3317 21 Oct 2020
A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cr... Read more ➔
CVE-2020-3352 21 Oct 2020
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. Th... Read more ➔
CVE-2020-3373 21 Oct 2020
A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD... Read more ➔