CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An...6.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....7.2 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....8.8 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8....6.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0. Attackers can rename a channel and...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private...7.5 High
- mattermost serverMattermost Server Sensitive Data Exposure5.3 Medium
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is...7.3 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic...6.5 Medium
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in...6.1 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via...5.3 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows...7.5 High
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow...7.5 High
pnet_packetcrates.io`pnet_packet` buffer overrun in `set_payload` setters6.0 Medium- mitre calderaCALDERA 2.7.0 allows XSS via the Operation Name box.5.4 Medium
- rtslib-fb project rtslib-fbrtslib-fb weak permissions for /etc/target/saveconfig.json file7.8 High
- casperjsPrototype Pollution7.3 High
- ec-cubeEC-CUBE Directory traversal vulnerability8.1 High
rmt-serveropenSUSESecurity update for rmt-serverNo score- rack project rack, canonical ubuntu linux, debian linux +2 moreRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...5.9 Medium
- qemu, canonical ubuntu linux +1 moreoss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.3.3 Low
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 Medium
- mikaelbr mversionCommand Injection in mversion7.3 High
- arm mbed osBuffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...9.1 Critical
- arm mbed osA buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...9.1 Critical
- arm mbed osAn infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...7.5 High
- arm mbed osA buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...9.1 Critical
- arm mbed-coapMemory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed...7.5 High
- wso2 identity server, identity server as key manager +1 moreAn issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through...5.4 Medium
- wso2 identity server, identity server as key manager +1 moreAn issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through...4.4 Medium
- wso2 identity server, identity server as key manager +1 moreAn issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through...6.1 Medium
- cisofy lynis, fedoraproject fedora +1 moreCISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The...4.2 Medium
- cisofy lynis, debian linux, fedoraproject fedora +2 moreIn CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list...3.3 Low
- dolibarrDolibarr SQL injection vulnerability in accountancy/customer/card.php8.8 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear srk60 firmware, srk60b03 firmware, srk60b04 firmware +4 more +6 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...6.8 Medium
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- Show moreLoading…