CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
arrowOSS-FuzzHeap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<No scorendpiOSS-FuzzUse-of-uninitialized-value in ndpi_check_dga_nameNo scorepcapplusplusOSS-FuzzUNKNOWN WRITE in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scoreleptonicaOSS-FuzzUse-of-uninitialized-value in numaCrossingsByThresholdNo score- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 High
- nvidia virtual gpu, canonical ubuntu linux, nvidia vgpu software +2 moreNVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which...4.4 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in...4.7 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process...7.8 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the...8.8 High
- apache spark, oracle business intelligence +1 moreImproper Authentication in Apache Spark9.8 Critical
- rockwellautomation factorytalk services platformIn Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service ...8.8 High
- osisoft pi web apiIn OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product...9.0 Critical
- dell emc unisphere for powermax, emc unisphere for powermax virtual appliance, powermax os +1 more +3 moreDell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax...7.4 High
- dell emc unisphere for powermax, emc unisphere for powermax virtual appliance, powermax os +1 more +3 moreDell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax...6.4 Medium
- django-basic-auth-ip-whitelist project django-basic-auth-ip-whitelistTiming attack on django-basic-auth-ip-whitelist2.2 Low
- nukevietNukeViet Cross-Site Request Forgery (CSRF)8.8 High
- nukevietNukeViet Cross-Site Request Forgery (CSRF)6.5 Medium
- nukevietNukeViet Cross-Site Request Forgery (CSRF)6.5 Medium
- paessler prtg network monitorXSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read...5.4 Medium
- iobit unlockerThe driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill...7.1 High
- iobit unlockerThe driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy...7.8 High
- gns3 ubridgeGNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local...5.5 Medium
- f-secure safeAn issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify...8.1 High
- f-secure safeAn issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version...8.1 High
- ibm security guardiumIBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security...5.3 Medium
- lora loramac-nodePotential Buffer Overflow in LoRaMac-node5.0 Medium
- tinxy smart wifi door lock firmwareTinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock...5.9 Medium
- pi-holePi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by...7.8 High
- tp-link tl-wr740n firmware, tl-wr740nd firmware +1 moreOn TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can...4.8 Medium
- atlassian jira, jira server and data center, jira software data center +2 moreVersions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting...5.3 Medium
- linked-hash-map project linked-hash-mapAccess of Uninitialized Pointer in linked-hash-map9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1...9.8 Critical
- freedroid freedroidrpgAn issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read...9.8 Critical
- freedroid freedroidrpgAn issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are...7.8 High
- herac tuxguitarAn issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses...7.5 High
- mitsubishi electric corporation melsec iq-r, iq-f, q, l, and fx series cpu modules, mitsubishielectric melsec-fx firmware, melsec-l firmware +3 more +5 moreMitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a...9.8 Critical
- openfind mailgates, mailaudit +1 moreOpenfind MailGates - Command Injection9.8 Critical
- atlassian jira, jira server, jira software data center +2 moreThe way in which velocity templates were used in Atlassian Jira Server and Data Center prior to...9.8 Critical
- wordpressIn wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could...5.3 Medium
- globalradar bsa radarThe Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are...5.4 Medium
- globalradar bsa radarGlobal RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple...9.8 Critical
- globalradar bsa radarA privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and...8.8 High
- globalradar bsa radardownloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA...4.3 Medium
- iobit advanced systemcareIOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion...7.1 High
- unisys stealthIn Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used...9.8 Critical
- chocolate-doom chocolate doom, crispy doom, opensuse backports +1 more +3 moreThe server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled...9.8 Critical
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache Batik7.5 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to...8.8 High
- google chromeAndroid WebView Universal Cross-site Scripting6.5 Medium
- Show moreLoading…