Hackers Make Off With Millions From Wisconsin Republicans

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2020-25780PUBLISHED: 2020-10-29

In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a log file can instead view a file outside of the log-files folder.

CVE-2020-27744PUBLISHED: 2020-10-29

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges.

CVE-2020-27995PUBLISHED: 2020-10-29

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

CVE-2020-4722PUBLISHED: 2020-10-29

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: ...

CVE-2020-4723PUBLISHED: 2020-10-29

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: ...

Support the originator by clicking the read the rest link below.