CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
-
botan2Mageia Updated botan2 packages fix security vulnerability No score -
roundcubemailMageia Updated roundcubemail packages fix security vulnerability No score - dnsmasq, fedoraproject fedora +1 more A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior... 5.9 Medium
- sonatype nexus repository manager Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution. 8.8 High
- sonatype nexus repository manager Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). 5.4 Medium
- sonatype nexus repository manager Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). 6.1 Medium
- vmware operations manager, tanzu application service for vms, vmware tanzu application service for vms +2 more +4 more App Autoscaler logs credentials 5.7 Medium
- spring by vmware integration, vmware spring integration, oracle banking corporate lending process management +6 more +8 more Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" 9.8 Critical
- vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 more JMX Insecure Default Configuration in GemFire 8.8 High
- vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 more JMX Credential Deserialization in GemFire 9.0 Critical
- octobercms october Reliance on Cookies without validation in OctoberCMS 6.1 Medium
- dell rsa authentication agent for microsoft windows, rsa multifactor authentication agent +1 more Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an... 8.4 High
- faye faye-websocket Missing TLS certificate verification in Faye Websocket 8.0 High
- faye Missing TLS certificate verification in Faye 8.0 High
- flexera flexnet publisher An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11... 7.5 High
- tgstation13 tgstation-server In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory tr… 7.7 High
- linux kernel, redhat enterprise linux +1 more A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles... 6.6 Medium
- red hat ansible tower A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return... 5.8 Medium
- red hat satellite A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files.... 8.8 High
- redhat openstack platform A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16,... 9.9 Critical
- inductiveautomation ignition gateway The affected product is vulnerable to an information leak, which may allow an attacker to obtain... 7.5 High
- huawei fusioncompute Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify... 6.7 Medium
- huawei p30, p30 firmware +1 more HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of... 6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more Firefox could be made to load attacker-supplied DLL files from the installation directory. This... 7.8 High
- qualcomm - Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system... 9.8 Critical
-
harfbuzzOSS-Fuzz Global-buffer-overflow in OT::VarData::get_scalars No score -
harfbuzzOSS-Fuzz Object-size in void hb_ot_map_t::apply<GPOSProxy> No score - cisco data center network manager Cisco Data Center Network Manager SQL Injection Vulnerability 6.3 Medium
- cisco data center network manager Cisco Data Center Network Manager Information Disclosure Vulnerability 5.3 Medium
- cisco sd-wan vmanage, sd-wan +1 more Cisco SD-WAN vManage Software Authorization Bypass Vulnerability 9.9 Critical
-
harfbuzzOSS-Fuzz UNKNOWN READ in hb_realloc_impl No score - cisco sd-wan, sd-wan vmanage, ios xe sd-wan +2 more Cisco SD-WAN Solution Software Buffer Overflow Vulnerability 9.8 Critical
-
harfbuzzOSS-Fuzz UNKNOWN WRITE in CFF::parsed_cs_op_t::set_skip No score - cisco data center network manager Cisco Data Center Network Manager Authentication Bypass Vulnerability 7.3 High
- cisco data center network manager Cisco Data Center Network Manager Command Injection Vulnerability 6.3 Medium
-
harfbuzzOSS-Fuzz UNKNOWN WRITE in hb_vector_t<CFF::dict_val_t>::resize No score - cisco data center network manager Cisco Data Center Network Manager Authentication Bypass Vulnerability 9.8 Critical
-
harfbuzzOSS-Fuzz UNKNOWN WRITE in hb_vector_t<CFF::op_str_t>::resize No score - cisco data center network manager Cisco Data Center Network Manager Path Traversal Vulnerability 8.8 High
- cisco data center network manager Cisco Data Center Network Manager Command Injection Vulnerability 8.2 High
- cisco data center network manager Cisco Data Center Network Manager Improper Authorization Vulnerability 8.8 High
- cisco data center network manager Cisco Data Center Network Manager Cross-Site Scripting Vulnerability 4.7 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 more In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the... 3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 more The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain... 3.7 Low
- bladex springblade The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY... 9.8 Critical
- hpe service pack for proliant, intelligent provisioning, synergy 480 gen10 plus compute module +1 more +3 more A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service... 6.7 Medium
- containous traefik Open redirect in Traefik 6.1 Medium
- ripe rpki validator 3 ** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14... 7.5 High
- ripe rpki validator 3 ** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28... 9.1 Critical
- ripe rpki validator 3 ** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14... 7.4 High
- Show olderLoading…