CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- google chromeUse after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to...9.6 Critical
- apache shiroImproper Authentication in Apache Shiro9.8 Critical
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA flaw was found in the CloudForms management engine version 5.10 and CloudForms management...8.0 High
- [unknown] quayA vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super...4.7 Medium
- [unknown] cephAn authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the...8.0 High
- winmagic securedocThe SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or...7.8 High
- winmagic securedocThe SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to...7.8 High
- [unknown] keycloakA vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to...6.4 Medium
- articatech artica proxyArtica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss...7.5 High
- [unknown] wildflyWildfly Unsafe Deserialization Vulnerability6.6 Medium
- sophos secure emailThe Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate...5.9 Medium
- articatech artica proxyArtica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios...9.8 Critical
- vipre password vaultThe ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate...5.9 Medium
- victorcms project victorcmsVictor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name,...6.1 Medium
- verint workforce optimizationVerint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.5.4 Medium
- rakuten viberViber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious...7.5 High
- pisay online e-learning system project online e-learning systemMultiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow...9.8 Critical
- webtareas project webtareasThe loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected...6.1 Medium
- bdtask multi-schedulerThe Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF)...6.5 Medium
- lora basics station, semtech lora basics station +1 moreUse After Free in in cups_update_info in LoRa Basics Station4.1 Medium
- w3c css validatorCross-site Scripting in CSS Validator4.6 Medium
- apnswift project apnswiftHeap-based Buffer Overflow in APNSwift6.3 Medium
- kordil edms project edmsdocuments_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php...8.8 High
- erelsgl limduCommand Injection in Limdu trainBatch function3.8 Low
- fortinet fortideceptorAn insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an...8.1 High
- cyberark conjur oss helm chartImproper Access Control in Conjur OSS Helm Chart8.7 High
- fortinet fortiwlcAn improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated...5.4 Medium
- gitlab gitlab-vscode-extensionClient side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on...8.6 High
- kordil edms project edmsKordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and...5.4 Medium
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLogin9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLogin9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLogin7.3 High
- ibi webfocus business intelligenceWebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.6.1 Medium
- ibi webfocus business intelligenceIn WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to...8.2 High
- ibi webfocus business intelligenceWebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack...8.8 High
- zyxel wap6806 firmwareZyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.8.6 High
- misp-project mispapp/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This...7.5 High
- kjur jsrsasign, netapp max data +1 moreECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign7.5 High
- kjur jsrsasign, netapp max data +1 moreRSA-PSS signature validation vulnerability by prepending zeros in jsrsasign9.8 Critical
- kjur jsrsasign, netapp max data +1 moreRSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign9.8 Critical
- bitdefender total security 2020Insufficient URL sanitization and validation in Safepay Browser (VA-8631)8.8 High
- mcafee advanced threat defense, mcafee, llc mcafee advanced threat defense (atd) +1 moreImproper Access Control vulnerability in ATD5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, apq8098 firmware +28 more +30 morePossible memory corruption in perfservice due to improper validation array length taken from user...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +19 more +21 moreA possible buffer overflow would occur while processing command from firmware due to the group_id...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer over-write may occur during fetching track decoder specific information if cb size exceeds...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +31 more +33 moreBuffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 morePossible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 morePossible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table...9.1 Critical
- qualcomm, inc. snapdragon consumer iot, snapdragon mobile, qualcomm kamorta firmware, qcs605 firmware +11 more +13 moreUse after free issue in camera applications when used randomly over multiple operations due to...7.8 High
- Show moreLoading…