CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- aruba clearpass policy managerThe ClearPass Policy Manager WebUI administrative interface has an authenticated command remote...7.2 High
- aruba clearpass policy managerThe ClearPass Policy Manager WebUI administrative interface has an authenticated command remote...7.2 High
- aruba clearpass policy managerThe ClearPass Policy Manager web interface is affected by a vulnerability that leads to...9.8 Critical
- jenkins play framework, jenkins project play framework plugin +1 moreOS command injection vulnerability in Jenkins Play Framework Plugin8.8 High
- jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +1 moreXSS vulnerability in Jenkins Subversion Partial Release Manager Plugin6.1 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreMissing permission check in Jenkins Project Inheritance Plugin6.5 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreMissing permission check in Jenkins Project Inheritance Plugin4.3 Medium
- jenkins selenium, jenkins project selenium plugin +1 moreComplete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection8.0 High
- jenkins compact columns, jenkins project compact columns plugin +1 moreStored XSS vulnerability in Jenkins Compact Columns Plugin5.4 Medium
- jenkins echarts api, jenkins project echarts api plugin +1 moreStored XSS vulnerability in Jenkins ECharts API Plugin5.4 Medium
- jenkins echarts api, jenkins project echarts api plugin +1 moreStored XSS vulnerability in Jenkins ECharts API Plugin5.4 Medium
- jenkins project self-organizing swarm plug-in modules plugin, jenkins self-organizing swarm modules +1 moreCSRF vulnerability in Jenkins Swarm Plugin6.5 Medium
- jenkins project self-organizing swarm plug-in modules plugin, jenkins self-organizing swarm modules +1 moreImproper permission checks in Jenkins Swarm Plugin4.3 Medium
- jenkins script security, jenkins project script security plugin +1 moreImproper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin5.4 Medium
- opensuse factory, leap 15.1, osc +4 more +6 moreosc: stores downloaded (supposed) RPM in network-controlled filesystem paths7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in Django6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in Django5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function...5.5 Medium
- systemd project systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moresystemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...6.7 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 High
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp23.7 Low
- atlassian navigator links, crucible, fisheye +2 moreThe CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from...4.3 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 morego7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not...5.5 Medium
- znc, fedoraproject fedora +1 moreZNC 1.8.0 up to 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer...6.5 Medium
- antonkueltz fastecdsaImproper Verification of Cryptographic Signature in fastecdsa7.5 High
- rocketgenius gravityformsGravity Forms plugin leak hashed passwords7.5 High
- joomla joomla\!In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.8.8 High
- joomla joomla\!In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles -...6.1 Medium
- joomla joomla\!In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules...6.1 Medium
- joomla joomla\!In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not...7.5 High
- ge rt430 firmware, rt431 firmware, rt434 firmware +2 moreGE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05...9.8 Critical
- websocket-extensions project websocket-extensionsRegular Expression Denial of Service in websocket-extensions (NPM package)7.5 High
- websocket-extensions project websocket-extensions, canonical ubuntu linux, debian linux +2 moreRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 High
- spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 moreDirectory Traversal with spring-cloud-config-server7.5 High
- automattic mailpoetThe MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web...6.1 Medium
- grafanaGrafana XSS via adding a link in General feature6.1 Medium
- grafanaGrafana XSS via a column style6.1 Medium
- grafanaGrafana XSS in Dashboard Text Panel6.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +16 more +18 moreA race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto,...7.0 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 moreFirmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +36 more +38 moreInteger overflow may occur if atom size is less than atom offset as there is improper validation...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreArray out of bound may occur while playing mp3 file as no check is there on offset if it is...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 morePossibility of out of bound access while processing the responses from video firmware in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, qualcomm sm8250 firmware, sxr2130 firmware +2 moreWhen making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sm8250 firmware, sxr2130 firmware +2 morekernel failure due to load failures while running v1 path directly via kernel in Snapdragon...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +3 more +5 moreNULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +25 more +27 moreBuffer overflow in display function due to memory copy without checking length of size using...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8009 firmware, apq8053 firmware +23 more +25 moreValid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 morePossibility of double free of the drawobj that is added to the drawqueue array of the context...7.8 High
- Show moreLoading…