CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- nvidia virtual gpu manager, vgpu software +1 more NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer... 7.1 High
- nvidia virtual gpu manager, vgpu software +1 more NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software... 7.8 High
- nvidia virtual gpu manager, vgpu software +1 more NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data... 7.1 High
- nvidia virtual gpu manager, vgpu software +1 more NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a... 6.3 Medium
- nvidia virtual gpu manager, vgpu software +1 more NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software... 7.8 High
- factorfx open computer software inventory next generation OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require... 8.8 High
- tibco managed file transfer command center, managed file transfer internet server +1 more TIBCO Managed File Transfer reflected XSS vulerability 8.8 High
- tibco managed file transfer command center, managed file transfer internet server +1 more TIBCO Managed File Transfer reflected XSS vulerability 6.3 Medium
- nozominetworks guardian Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection. 7.3 High
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 more Moderate: squid:4 security, bug fix, and enhancement update 7.5 High
- cellebrite ufed firmware The Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on key material hardcoded within... 7.5 High
- squid-cache squid, fedoraproject fedora +1 more Moderate: squid:4 security, bug fix, and enhancement update 9.9 Critical
- nozominetworks guardian Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by... 6.1 Medium
- delta electronics industrial automation dopsoft, deltaww dopsoft +1 more Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Opening a specially crafted... 7.8 High
- obdev little snitch Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the... 8.8 High
- prestosql presto Privilege escalation in Presto 7.4 High
- mirumee saleor, saleor-storefront +1 more Client caching login operation with plaintext password in Saleor Storefront 6.9 Medium
- auth0 express-jwt Authorization bypass in express-jwt 7.7 High
-
jsrsasignnpm ECDSA signature vulnerability of Minerva timing attack in jsrsasign 5.9 Medium - neutrinolabs xrdp Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it 7.5 High
- arswp windows cleanup assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a... 7.8 High
- arswp windows cleanup assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a... 7.8 High
- apache skywalking **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through... 7.5 High
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi... 9.8 Critical
- cymiinstaller322 activex project activex, tobesoft.co.ltd miplatform +1 more To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX of TOBESOFT.CO.LTD, 7.2 High
- commax wallpad, cdp-1020mb firmware +1 more Commax WallPad Remote Code Execution Vulnerability 7.5 High
- misp-project misp An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL... 4.3 Medium
- misp-project misp An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient... 9.8 Critical
- hmtalk daoffice, daview indy, human talk daview indy, dava+, daoffice +1 more +3 more A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could... 7.0 High
- iobit malware fighter IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by... 4.4 Medium
- cakefoundation cakephp Cross-Site Request Forgery in CakePHP 4.3 Medium
- activision call of duty modern warfare 2 An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12... 9.8 Critical
- ifax hylafax enterprise, hylafax\+ project hylafax\+ +1 more HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories... 7.8 High
- ifax hylafax enterprise, fedoraproject fedora, hylafax\+ project hylafax\+ +2 more +4 more In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in... 7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 more It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode... 9.8 Critical
- mediaarea mediainfo, fedoraproject fedora +1 more In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in... 7.8 High
- mitsubishi electric corporation electoric fa engineering software, mitsubishielectric cpu module logging configuration tool, cw configurator +18 more +20 more Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software ... 7.5 High
- mitsubishi electric corporation electoric fa engineering software, mitsubishielectric cpu module logging configuration tool, cw configurator +18 more +20 more Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y... 7.5 High
- national tax agency chrome extension for e-tax reception system, nta e-tax reception system +1 more Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an... 8.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator... 4.9 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended... 6.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with... 4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with... 4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via... 7.5 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction... 6.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction... 4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated... 6.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 more Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction... 8.1 High
- atlassian jira, jira server, jira software data center +2 more Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject... 4.8 Medium
- atlassian jira, jira server, jira data center +1 more +3 more Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify... 4.3 Medium
- Show olderLoading…