CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- piwigo lexiglotLexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (names and...5.3 Medium
- piwigo lexiglotadmin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and...9.8 Critical
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server...7.5 High
- quickboxIn QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data...8.8 High
- quickboxQuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated...8.8 High
- verizon serialize-javascriptInsecure serialization leading to RCE in serialize-javascript8.1 High
ca-certificatesUbuntuca-certificates updateNo score- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +14 more +16 moreThere is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads...6.5 Medium
- upxp_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a...5.5 Medium
- gesio erpGESIO SQL injection vulnerability10.0 Critical
- celluloid reelHTTP Request Smuggling in reel7.5 High
- zte f680 firmwareZTE's PON terminal product is impacted by the access control vulnerability. Due to the system not...6.5 Medium
- traitobject project traitobjectOut of bounds write in traitobject9.8 Critical
- atlassian crucible, fisheye +1 moreThe review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote...5.4 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreAffected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and...5.4 Medium
- atlassian companion, companion app +1 moreThe file downloading functionality in the Atlassian Companion App before version 1.0.0 allows...7.2 High
- atlassian companion, companion app +1 moreThe file editing functionality in the Atlassian Companion App before version 1.0.0 allows local...7.8 High
- atlassian crucible, fisheye +1 moreThe setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote...8.8 High
- atlassian crucible, fisheye +1 moreThe /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian...5.3 Medium
- atlassian crucible, fisheye +1 moreThe /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye...5.3 Medium
- atlassian crucible, fisheye +1 moreThe /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1...4.3 Medium
- atlassian crucible, fisheye +1 moreThe /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1...4.3 Medium
- atlassian crucible, fisheye +1 moreThe review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote...5.4 Medium
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft software7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft software8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft software8.2 High