CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- ibm mq, websphere mq +1 moreIBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of...5.9 Medium
- cypress cyw20735 firmwareOn the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an...7.8 High
- google androidThis is an unbounded write into kernel global memory, via a user-controlled buffer size.Product:...9.8 Critical
- google androidIn crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use...9.8 Critical
- google androidFunction abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object...9.8 Critical
- google androidIn crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a...7.8 High
- beckhoff twincat, twincat driver for intel 8254x (tcl8254x.sys), twincat driver for intel 8255x (tcl8255x.sys) +1 more +3 moreBeckhoff: Etherleak in TwinCAT RT network driver5.3 Medium
- netflix conductorExpression Language Injection in Netflix Conductor9.8 Critical
- microfocus arcsight management centerUnauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center...4.3 Medium
- microfocus arcsight management centerCross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product,...5.4 Medium
- microfocus arcsight management centerUnauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center...4.3 Medium
- microfocus arcsight enterprise security manager expressCross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM...6.1 Medium
- geti2p i2pI2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file...7.8 High
- fedoraproject fedora, tiny-http project tiny-http +1 moreHTTP Request smuggling in tiny_http6.5 Medium
- dell encryption, encryption enterprise, endpoint security suite enterprise +2 moreDell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7...6.7 Medium
- jerryscriptAn issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0....7.5 High
- webroot endpoint agentsWebroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG...7.8 High
- webroot endpoint agentsWebroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type...9.1 Critical
- plex media server, plex, inc. plex media server +1 moreImproper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute...8.8 High
- rockwellautomation factorytalk linx, rslinx classic +1 moreFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected...7.5 High
- rockwellautomation factorytalk linx, rslinx classic +1 moreFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected...7.5 High
- rockwellautomation factorytalk linx, rslinx classic +1 moreFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected...9.8 Critical
- rockwellautomation factorytalk linx, rslinx classic +1 moreFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected...8.1 High
- advantech webaccess, webaccess node +1 moreWebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may...9.8 Critical
- apache tomeeMissing Authentication for Critical Function in Apache TomEE9.8 Critical
- connectwise automate apiBy using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user...8.8 High
- digdashAn issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login...7.5 High
- digdashAn issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2...7.8 High
- digdashAn issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2...6.1 Medium
- openbmc-project openbmcuser_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that...8.8 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...7.7 High
- barton ngircd, debian linux, fedoraproject fedora +2 moreThe Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access,...7.5 High
- troglobit uftpdIn uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a...7.5 High
- gnu bisonGNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash).5.5 Medium
- ijg libjpeg, debian linux +1 moreIn IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor...7.1 High
- ijg libjpegIn IJG JPEG (aka libjpeg) before 9d, jdhuff.c has an out-of-bounds array read for certain table...7.1 High
- mutt, canonical ubuntu linux +1 moreMutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt...4.8 Medium
- pcre, apple macos, splunk universal forwarder +2 morelibpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X...7.5 High
- apsis poundPound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.9.1 Critical
- caddyserver caddyCaddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication9.8 Critical
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....9.8 Critical
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....9.8 Critical
- libemf project libemf, fedoraproject fedora +1 moreScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an...5.5 Medium
- dlink dsl-2750u firmwareD-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control...7.8 High
- sokkia gnr5 vanguard firmwareSOKKIA GNR5 Vanguard WEB version 1.2 (build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3) and...9.8 Critical
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability...7.8 High
- huawei p30 firmware, p30 pro firmware, tony-al00b firmware +2 moreHUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135...6.8 Medium
- huawei fusionaccessHuawei FusionAccess products with versions earlier than 6.5.1.SPC002 has a Denial of Service (DoS...6.5 Medium
- huawei secospace usg6300 firmware, secospace usg6600 firmware, usg6300e firmware +2 moreHuawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60...6.5 Medium
- open-xchange ox guardOX Guard 2.10.3 and earlier allows XSS.6.1 Medium
- Show moreLoading…