CVEs published in October 2020
8 tracked CVEs from 4 vendors had their first vendor advisory published in October 2020: 1 critical, 2 high, 4 in CISA KEV. Newest first.
- Added
CVE-2018-19953MediumCISA KEV
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · 1 advisory - Added
CVE-2018-19949CriticalCISA KEV
QNAP NAS File Station Command Injection Vulnerability
QNAP · 1 advisory - Added
CVE-2018-19943HighCISA KEV
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · 1 advisory - Added
CVE-2020-27888High
issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices
Ubiquiti · 1 advisory - Added
CVE-2020-3992UnratedCISA KEV
VMware ESXi OpenSLP Use-After-Free Vulnerability
VMware · 1 advisory - Added
CVE-2020-13943Unrated
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers
Apache · 1 advisory - Added
CVE-2020-1945Unrated
Apache · 1 advisory - Added
CVE-2020-11979Unrated
Apache · 1 advisory