CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
open62541OSS-FuzzHeap-buffer-overflow in UA_copyNo scorelibspngOSS-FuzzHeap-buffer-overflow in spng_decode_imageNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponseNo scoredav1dOSS-FuzzUNKNOWN READ in dav1d_put_bilin_avx2No scorereadstatOSS-FuzzHeap-buffer-overflow in sas_read4No scoreirssiOSS-FuzzBad-free in sig_destroyedNo scorelibhevcOSS-FuzzHeap-buffer-overflow in ihevcd_processNo scorelibrawspeedOSS-FuzzUse-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitializedNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::Message::WriteNo scoreleptonicaOSS-FuzzHeap-use-after-free in pixReadMemBmpNo scoresystemdOSS-FuzzHeap-use-after-free in condition_free_list_typeNo scorezstdOSS-FuzzUse-of-uninitialized-value in ZSTD_loadCEntropyNo scorec-aresOSS-FuzzNull-dereference READNo scorelwanOSS-FuzzGlobal-buffer-overflow in lex_multiline_stringNo scorelibavcOSS-FuzzHeap-buffer-overflow in ih264d_decode_slice_threadNo scorelibarchiveOSS-FuzzHeap-use-after-free in copy_stringNo scoreyaraOSS-FuzzHeap-use-after-free in dotnet_parse_tilde_2No scoreopenh264OSS-FuzzUse-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPictureNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::Message::WriteNo scorelibhevcOSS-FuzzHeap-use-after-free in ihevcd_jobq_lockNo score- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...5.5 Medium
- uclouvain openjpeg, debian linux, oracle outside in technology +2 morejp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if...6.5 Medium
- oauth2 proxy proxy, pusher oauth2 proxy +1 moreOpen Redirect in OAuth2 Proxy4.3 Medium
- avast avg antivirus, free antivirus +1 moreAn elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free...5.5 Medium
- iball wrb303n firmwareiBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling...6.5 Medium
- broadcom brocade network advisor, brocade communications systems, inc. network advisor +1 moreA vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated,...9.8 Critical
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...5.9 Medium
- sophos xg firewall, xg firewall firmware +1 moreSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via...9.8 Critical
- maipu mp1800x-50 firmwareThe web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain...5.3 Medium
- nediNeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell...8.8 High
- nediNeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc...6.1 Medium
- nediNeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell...8.8 High
- mk-authAn issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell...9.8 Critical
- mk-authAn issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow...6.1 Medium
- mk-authAn issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login...9.8 Critical
- mk-authAn issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as...6.8 Medium
- mk-authAn issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to...9.8 Critical
- thingssdk wifiscannerOS Command Injection in wifiscanner9.8 Critical
- zyxel cloud cnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...5.9 Medium
- palo alto networks pan-osPAN-OS: Authentication Bypass in SAML Authentication10.0 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.5.9 Medium
- Show moreLoading…