CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- adobe dng software development kit (sdk), digital negative software development kit +1 moreAdobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow...7.8 High
- adobe dng software development kit (sdk), digital negative software development kit +1 moreAdobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow...7.8 High
- adobe premiere proAdobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful...5.5 Medium
- adobe premiere rushAdobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability....5.5 Medium
- adobe dng software development kit (sdk), digital negative software development kit +1 moreAdobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow...7.8 High
- adobe dng software development kit (sdk), digital negative software development kit +1 moreAdobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read...3.3 Low
- beakerbrowser beakerDeserialization of Untrusted Data in Beaker6.8 Medium
- idriveIDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with...7.8 High
- johnsoncontrols exacqvision enterprise manager, exacqvision web service, johnson controls exacqvision enterprise manager versions 20.03.3.0 and prior +1 more +3 moreexacqVision Software - Improper Verification of Cryptographic Signature6.8 Medium
- jiangmin antivirusIn Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a...5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache Tomcat7.5 High
- honeywell controledge plc, controledge rtu, controledge plc firmware +1 more +3 moreControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes...7.5 High
- philips ultrasound clearvue, ultrasound cx, ultrasound epiq/affiniti +10 more +12 morePhilips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel3.6 Low
- mattermostAn issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party...7.5 High
- honeywell controledge plc, controledge rtu, controledge plc firmware +1 more +3 moreControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes...7.5 High
- apache artemis, red hat activemq artemis, netapp oncommand workflow automation +2 moreActiveMQ Artemis has Insufficiently Protected Credentials5.5 Medium
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys...5.5 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL ...5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log...5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.7.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.7.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query...5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query...5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager...6.1 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess...7.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.7.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.7.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc...9.8 Critical
- zyxel cloud cnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager...9.8 Critical
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive...5.9 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send...6.3 Medium
- nediNeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file...6.1 Medium
- nediNeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly...6.1 Medium
- crossbeam-channel project crossbeam-channelIncorrect buffer size in crossbeam-channel5.5 Medium
- crossbeam-rs crossbeamUndefined Behavior in bounded Crossbeam channel8.1 High
- turnkeylinux support incident trackerSupport Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection...7.2 High
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges7.7 High
- Show moreLoading…