CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (incl. SIPLUS variants) (All versions). The...9.1 Critical
- siemens simatic pcs 7 v8.2 and earlier, simatic pcs 7 v9.0, simatic pdm +6 more +8 moreA vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC PDM (All versions),...7.8 High
- siemens simatic pcs 7 v8.2 and earlier, simatic pcs 7 v9.0, simatic pdm +6 more +8 moreA vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC PDM (All versions),...7.8 High
- red hat openstack-cinder, canonical ubuntu linux +1 moreOpenstack cinder Improper handling of ScaleIO backend credentials6.5 Medium
- cd-messenger project cd-messengerCode Injection in cd-messenger9.8 Critical
- access-policy project access-policyImproper Input Validation in access-policy9.8 Critical
- node-extend project node-extendCode Injection in node-extend9.8 Critical
- mosc project moscCode Injection in mosc8.6 High
- goliath project goliathHTTP Request Smuggling in goliath7.5 High
- ohler agooWithdrawn: HTTP Request Smuggling in Agoo7.5 High
- gitlabA Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code...6.1 Medium
- gitlabMissing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1...7.5 High
- gitlabA specially crafted request could be used to confirm the existence of files hosted on object...5.3 Medium
- gitlabA Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the...6.1 Medium
- gitlabA Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in...6.1 Medium
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to buffer overflow after valid authentication,...8.8 High
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the...7.5 High
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to buffer overflow based on the product...7.5 High
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by...7.5 High
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to command injection after valid authentication,...7.5 High
- ibm qradar network packet capture, qradar network packet capture software +1 moreIBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users...5.9 Medium
- sap fiori, sap se fiori for sap s/4hana +1 moreSAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to...5.4 Medium
- sap commerceSAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under...8.6 High
- sap se netweaver as java, sap netweaver application server java +1 moreStandalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...6.9 Medium
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data...6.5 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754,...7.6 High
- sap solution manager, sap se solution manager (problem context manager) +1 moreSAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary...8.2 High
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows...4.3 Medium
- sap se netweaver as abap (banking services), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C,...6.5 Medium
- sap erp \(ea-finserv\), erp \(s4core\), sap se erp (statutory reporting for insurance companies) +2 moreStatutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605,...5.4 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application sbspext table) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701,...6.1 Medium
- sap business one, sap se business one (backup service) +1 moreUnder certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an...4.4 Medium
- mcafee virusscan enterprise, mcafee, llc mcafee virusscan enterprise (vse) +1 moreSymbolic Link vulnerability during DAT update7.8 High
- mcafee virusscan enterprise, mcafee, llc mcafee virusscan enterprise (vse) +1 moreUsing VSE to bypass Windows Credentials on Lock screen6.3 Medium
- mcafee virusscan enterprise, mcafee, llc mcafee virusscan enterprise (vse) +1 moreVSE Escalation of Privileges through Alert pop-up window7.0 High
- mcafee host intrusion prevention, mcafee, llc mcafee host intrusion prevention system (host ips) for windows +1 moreDLL search order hijacking in Host IPS4.6 Medium
- mcafee agent, mcafee, llc mcafee agent (ma) +1 moreDLL search order hijacking in MA5.9 Medium
- mcafee total protection, mcafee, llc total protection (tops) for mac os +1 morePrivilege escalation in ToPS for Mac7.5 High
- siemens simatic automation tool, simatic net pc software v14, simatic net pc software v15 +33 more +35 moreA vulnerability has been identified in SIMATIC Automation Tool (All versions), SIMATIC NET PC...6.7 Medium
- mitel micollab audio\, web \& video conferencingA Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before...5.3 Medium
- linux kernelA flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used...5.5 Medium
- linux kernelA flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB ...5.5 Medium
- linux kernelA logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in...5.5 Medium
cockpit-podmanAlmaLinux,containernetworking-pluginsAlmaLinux,critAlmaLinux +6 more +8 morecontainer-tools:2.0 bug fix updateNo scorecritAlmaLinux,criuAlmaLinux,python3-criuAlmaLinux +4 more +6 morecontainer-tools:rhel8 bug fix updateNo score- j2storeThe J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store...8.8 High
- lenovo synaptics smart audio uwp app, synaptics smart audio uwp +1 moreAn unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics...6.7 Medium
- lenovo bios, thinkpad e14 firmware, thinkpad e15 firmware +36 more +38 moreLenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent...6.4 Medium
- lenovo bios, thinkpad a275 firmware, thinkpad a285 firmware +5 more +7 moreThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485,...6.1 Medium
- lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +170 more +172 moreA potential vulnerability in the SMI callback function used in the Legacy SD driver in some...6.4 Medium
- Show moreLoading…