CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- jenkins stash branch parameter, jenkins project stash branch parameter plugin +1 morePasswords transmitted in plain text by Jenkins Stash Branch Parameter Plugin4.3 Medium
- jenkins testcomplete support, jenkins project testcomplete support plugin +1 morePassword stored in plain text by Jenkins TestComplete support Plugin4.3 Medium
- jenkins slack upload, jenkins project slack upload plugin +1 moreSecret stored in plain text by Jenkins Slack Upload Plugin4.3 Medium
- jenkins vncviewer, jenkins project vncviewer plugin +1 moreReflected XSS vulnerability in Jenkins VncViewer Plugin6.1 Medium
- jenkins vncrecorder, jenkins project vncrecorder plugin +1 moreReflected XSS vulnerability in Jenkins VncRecorder Plugin6.1 Medium
- jenkins vncrecorder, jenkins project vncrecorder plugin +1 moreStored XSS vulnerability in Jenkins VncRecorder Plugin4.8 Medium
- jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreMissing permission checks in Jenkins Fortify on Demand Plugin5.4 Medium
- jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreCSRF vulnerability in Jenkins Fortify on Demand Plugin4.3 Medium
- jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreUsers with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin4.3 Medium
- jenkins sonargraph integration, jenkins project sonargraph integration plugin +1 moreStored XSS vulnerability in Jenkins Sonargraph Integration Plugin5.4 Medium
- ledger liveLedger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's...8.1 High
- cisco unity connection, unified communications manager, unified communications manager im and presence service +2 moreCisco Unified Communications Products Cross-Site Scripting Vulnerability6.1 Medium
- tobesoft nexacro14/17 excommonapiv13, nexaweb nexacro 14, nexacro 17 +2 moreTobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability7.8 High
- tobesoft nexacro14/17 excommonapiv13, nexaweb nexacro 14, nexacro 17 +2 moreTobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability7.8 High
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via...6.7 Medium
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via...4.4 Medium
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX...5.4 Medium
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS)...7.5 High
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the...7.3 High
- duckduckgo** DISPUTED ** The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for...7.5 High
- cisco unified customer voice portal, unified ip interactive voice response (ivr) +1 moreCisco Unified Customer Voice Portal Information Disclosure Vulnerability5.3 Medium
- cisco digital network architecture center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Information Disclosure Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco small business 200 series smart switches, sf200-24 firmware, sf200-24fp firmware +116 more +118 moreCisco Small Business Smart and Managed Switches Session Management Vulnerability8.1 High
- libraw, debian linux, fedoraproject fedora +2 moreLibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp...7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...6.5 Medium
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...7.5 High
- debian linux, samba, fedoraproject fedora +2 more +4 moreA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in...6.5 Medium
- github cmark-gfm, github flavored markdown project flavored markdown, fedoraproject fedora +2 moreDenial of service in table parsing in cmark-gfm6.5 Medium
- tileserver tileserverglCross-site scripting in TileServer GL6.1 Medium
- wavlink wl-wn530hg4 firmwareAn issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell...9.8 Critical
- wavlink wl-wn530hg4 firmwareAn issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer...9.8 Critical
- linkplayAn issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS...8.8 High
- linkplayAn issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN...9.8 Critical
- linkplayAn issue was discovered on various devices via the Linkplay firmware. There is WAN remote code...9.8 Critical
- powerdns recursorIn PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting...5.3 Medium
- locutus phpOS Command Injection in Locutus9.8 Critical
- mikaelbr mversionCommand Injection8.4 High
- monstaftp monsta ftpMonsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This...9.8 Critical
- monstaftp monsta ftpMonsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the...6.1 Medium
- monstaftp monsta ftpMonsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to...9.8 Critical
- gfi software helpdeskThis improper access control vulnerability in Helpdesk allows attackers to get control of QNAP...9.8 Critical
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution7.8 High
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: stack-based overflow7.8 High
- leadtoolsAn exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20....8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1...7.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn version 11.6.1-11.6.5.2 of the BIG-IP system Configuration utility Network > WCCP page, the...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a cross...8.8 High
- f5 big-ip access policy managerIn versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux...5.5 Medium
- Show moreLoading…