CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- qualcomm, inc. snapdragon consumer iot, snapdragon mobile, snapdragon wearables, qualcomm msm8909w firmware, qcs605 firmware +2 moreFailure in buffer management while accessing handle for HDR blit when color modes not supported...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +8 more +10 moreOut of bound memory access while processing qpay due to not validating length of the response...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +34 more +36 moreOut of bound memory access while processing ese transmit command due to passing Response buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreUsing non-time-constant functions like memcmp to compare sensitive data can lead to information...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +12 more +14 moreInteger overflow in calculating estimated output buffer size when getting a list of installed...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, msm8998 firmware +14 more +16 moreImproper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +39 more +41 moreWhen attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +28 more +30 moreOut of bound read in Fingerprint application due to requested data is being used without length...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +21 more +23 moreOut of bound read in in fingerprint application due to requested data assigned to a local buffer...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8098 firmware +20 more +22 moreOut of bound read in adm call back function due to incorrect boundary check for payload in...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +21 more +23 moreBuffer over-read in ADSP parse function due to lack of check for availability of sufficient data...7.1 High
- asus aura syncEne.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044,...7.8 High
- sysax multi serverAn issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under...5.3 Medium
- mediawikiMediaWiki Open Redirect vulnerability6.1 Medium
- sysax multi serverAn issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid...6.1 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- sysax multi serverAn issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the...8.8 High
- docker engine, broadcom sannav, debian linux +1 more +3 moreImproper Input Validation in Docker Engine6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 morehw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...2.5 Low
- istio, istio.io istio/envoy +1 moreIstio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when...7.5 High
- vm-memory project vm-memoryImproper Synchronization and Race Condition in vm-memory7.5 High
- cisco nx-os, ucs manager, unified computing system +4 more +6 moreIP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic5.3 Medium
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 High
- mozilla firefoxWhen using certain blank characters in a URL, they where incorrectly rendered as spaces instead...8.8 High
- mozilla firefoxWhen browsing a document hosted on an IP address, an attacker could insert certain characters to...6.5 Medium
- mozilla firefoxMozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Medium
- fortinet forticlient, forticlient for windows +1 moreAn Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a...6.3 Medium
- fortinet fortiap-s, fortiap-u, fortiap-w2 +2 moreAn improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and...6.5 Medium
- bitrix bitrix24modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall...6.1 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoS7.5 High
- quickboxIn QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data...7.2 High
ca-certificatesUbuntuca-certificates updateNo score- 2pisoftware cmfivesystem/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions,...7.5 High
- farsite farlinx x25 gateway firmwareFarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to...9.8 Critical
- farsite farlinx x25 gateway firmwareFarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via...9.8 Critical
- farsite farlinx x25 gateway firmwareFarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature.5.3 Medium
- piwigo lexiglotLexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin...9.8 Critical
- piwigo lexiglotLexiglot through 2014-11-20 allows CSRF.8.8 High
- piwigo lexiglotLexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter.8.8 High
- piwigo lexiglotLexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the...5.4 Medium
- piwigo lexiglotLexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update...7.5 High
- piwigo lexiglotLexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a...7.8 High
- piwigo lexiglotLexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path)...5.3 Medium
- Show moreLoading…