CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +32 more +34 moreStack based overflow If the maximum number of arguments allowed per request in perflock exceeds...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon mobile, qualcomm apq8053 firmware, rennell firmware +1 more +3 moreImproper access due to socket opened by the logging application without specifying localhost...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +34 more +36 moreAny application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossible buffer overflow while copying the frame to local buffer due to lack of check of length...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon mobile, snapdragon voice & music, qualcomm sm8150 firmware +1 moreDouble free issue in kernel memory mapping due to lack of memory protection mechanism in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +62 more +64 moreInteger overflow in diag command handler when user inputs a large value for number of tasks field...7.8 High
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9207c firmware +6 more +8 moreSystem Services exports services without permission protect and can lead to information exposure...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, qcs405 firmware +7 more +9 moreDouble free issue in NPU due to lack of resource locking mechanism to avoid race condition in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +38 more +40 moreOut of bound write can happen due to lack of check of array index value while parsing SDP...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +30 more +32 moreBuffer overflow occurs while processing an subsample data length out of range due to lack of user...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +54 more +56 moreCopying RTCP messages into the output buffer without checking the destination buffer size which...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreBuffer overflows while decoding setup message from Network due to lack of check of IE message...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +13 more +15 moreWhile IPA driver processes route add rule IOCTL, there is no input validation of the rule ID...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +32 more +34 morePayload size is not validated before reading memory that may cause issue of accessing invalid...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +18 more +20 morekernel writes to user passed address without any checks can lead to arbitrary memory write in...7.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDP3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDP3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDP3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDP3.5 Low
- goldplugins easy testimonialsMultiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow...5.4 Medium
- php-fusionA SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments...7.2 High
- concretecms concrete cmsUnrestricted Uploads in Concrete55.3 Medium
- machothemes image photo gallery final tiles gridMultiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow...5.4 Medium
- gogsInsecure Permissions in Gogs6.5 Medium
- aapanelaaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell...8.8 High
- tendenciDeserialization of Untrusted Data in Tendenci9.8 Critical
- squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates...9.8 Critical
- squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates...8.8 High
- gitlabAn authorization issue relating to project maintainer impersonation was identified in GitLab EE 9...7.5 High
- gitlabKubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other...5.3 Medium
- gitlabAmazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other...5.3 Medium
- gitlabClient-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1...6.1 Medium
- gitlabA user with an unverified email address could request an access to domain restricted groups in...8.0 High
- gitlabA security issue allowed achieving Denial of Service attacks through memory exhaustion by...7.5 High
- gitlabA Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0...7.5 High
- gitlabUser email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to...4.3 Medium
- gitlabOAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user...7.5 High
- gitlabUser is allowed to set an email as a notification email even without verifying the new email in...7.4 High
- dmitry project dmitryA stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow...9.8 Critical
- bt ctroms terminal project ctroms terminalAn issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur...8.1 High
- woocommerceWooCommerce Cross-Site Request Forgery (CSRF)8.8 High
- mattermost serverAn issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial...7.5 High
- mattermost serverMattermost Server allows XSS via CSRF6.1 Medium
- mattermost serverMattermost Server: Files may be rendered inline instead of downloaded, allowing script execution6.1 Medium
- mattermost serverMattermost Server is vulnerable to XSS through crafted links6.1 Medium
- Show moreLoading…