CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not...8.1 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...7.5 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.1 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...6.2 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...6.2 Medium
- ibm mq for hpe nonstopIBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause...5.3 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...8.4 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.3 Medium
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can...2.7 Low
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to...2.7 Low
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on...3.7 Low
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear...6.3 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- os4ed opensisopenSIS through 7.4 allows Directory Traversal.7.5 High
- os4ed opensisopenSIS through 7.4 has Incorrect Access Control.9.1 Critical
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- os4ed opensisopenSIS through 7.4 allows SQL Injection.9.8 Critical
- os4ed opensisopenSIS before 7.4 allows SQL Injection.9.8 Critical
- f5 nginx controllerIn NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site...9.6 Critical
- f5 nginx controllerIn NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is...7.8 High
- f5 nginx controllerIn versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery...8.8 High
- node.bcrypt.js project node.bcrypt.jsInsecure Encryption5.9 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- hcltech domino"A vulnerability in the TLS protocol implementation of the Domino server could allow an...5.9 Medium
- ibm inotes"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use...6.1 Medium
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log...5.3 Medium
- journal-theme journalThe Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.7.5 High
- ntop ndpiIn nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in...9.1 Critical
- ntop ndpi, debian linux +1 moreIn nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in...9.1 Critical
- ntop ndpiIn nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in...9.1 Critical
- ntop ndpiIn nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.9.8 Critical
- ntop ndpiIn nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain...9.8 Critical
- ntop ndpi, debian linux +1 moreIn nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in...7.5 High
- rockcarry ffjpegffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.5.5 Medium
- persian vip download script project vip download scriptPersian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.9.8 Critical
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center...4.3 Medium
- atlassian confluence, confluence server, confluence data center +2 moreAtlassian Confluence Server and Data Center before version 7.5.1 allowed remote attackers with...4.7 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe attachment download resource in Atlassian Jira Server and Data Center The attachment download...4.8 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from...5.4 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from...6.1 Medium
- atlassian jira, jira server and data center, jira software data center +2 moreThe quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote...6.1 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7,...5.9 Medium
- atlassian jira, jira server and data center, jira server +2 more +4 moreThe MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5...7.5 High
- atlassian jira service desk server and data center, jira service desk +1 moreThe /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before...4.8 Medium
- atlassian jira, jira server and data center, jira software data center +2 moreThe UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9...5.3 Medium
- atlassian jira, jira server and data center, jira software data center +2 moreThe WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote...6.1 Medium
- atlassian jira, jira server +1 moreThe /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote...5.3 Medium
mrubyOSS-FuzzUNKNOWN READ in str_decrefNo scoreopenh264OSS-FuzzHeap-use-after-free in WelsDec::DecreasePicBuffNo score- Show moreLoading…