CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- ozone project ozoneOut of bounds read in Ozone9.8 Critical
haproxyOSS-FuzzHeap-buffer-overflow in readcfgfileNo scoregdalOSS-FuzzHeap-buffer-overflow in OGR_RawField_IsUnsetNo scorendpiOSS-FuzzHeap-use-after-free in check_content_type_and_change_protocolNo scorehaproxyOSS-FuzzHeap-buffer-overflow in memvprintfNo scoremrubyOSS-FuzzHeap-double-free in mrb_default_allocfNo scoreglibOSS-FuzzHeap-buffer-overflow in uri_decoderNo scorehoextdownOSS-FuzzHeap-buffer-overflow in is_codefenceNo scoreglibOSS-FuzzHeap-buffer-overflow in uri_decoderNo scorechromiumDebianchromium - regression updateNo score- mcafee network security management (nsm), network security management +1 moreNetwork Security Management (NSM) - Exposure of Sensitive Information8.6 High
- dronecode micro air vehicle link, px4 mavlink +1 moreRVD#3316: No authentication in MAVLink protocol9.8 Critical
- dronecode micro air vehicle link, px4 mavlink +1 moreRVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.07.5 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.5 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.5 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.5 High
- veeam availability suite, backup \& replication +1 moreVeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has...8.8 High
- No product listedSecurity update for zstdNo score
- No product listedSecurity update for zstdNo score
- No product listedSecurity update for zstdNo score
- atlassian jira, jira server, jira data center +1 more +3 moreThe file upload feature in Atlassian Jira Server and Data Center in affected versions allows...5.4 Medium
- atlassian jira, jira server, jira software data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to achieve...9.8 Critical
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to execute...7.8 High
- atlassian jira, jira server, jira software data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent...6.5 Medium
- qemu, debian linux +1 moreIn QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL...2.3 Low
- shopify koa-shopify-authCross-site scripting in @shopify/koa-shopify-auth6.1 Medium
- nextcloud deckImproper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other...4.1 Medium
- ui unifi protect firmwareWe have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi...8.8 High
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreRemote code execution via user-provided local names in ActionView8.8 High
- prestashopImproper Authentication8.9 High
- tendermintDenial of Service in TenderMint6.5 Medium
- october cms octoberCross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites3.7 Low
- prestashopExternal control of configuration setting in the dashboard in PrestaShop7.1 High
- prestashopReflected XSS when uploading an image in the Product page in PrestaShop4.7 Medium
- prestashopStored XSS in PrestaShop5.4 Medium
- prestashopImproper access control in PrestaShop6.4 Medium
- prestashopInformation disclosure in release archive in PrestaShop5.3 Medium
- prestashopInformation exposure in the upload directory in PrestaShop5.3 Medium
- traefikImproper Authentication7.5 High
- ithemes paypal proThe CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.9.8 Critical
- synacor zimbra collaboration suiteAn XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15...6.1 Medium
- jenkins link column, jenkins project link column plugin +1 moreStored XSS vulnerability in Jenkins Link Column Plugin5.4 Medium
- jenkins project hp alm quality center plugin, hp application lifecycle management quality center project application lifecycle management quality center +1 morePassword stored in plain text by Jenkins HP ALM Quality Center Plugin3.3 Low
- jenkins project compatibility action storage plugin, praqma compatibility action storage +1 moreReflected XSS in Jenkins Compatibility Action Storage Plugin6.1 Medium
- jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreMissing permission checks in Zephyr for JIRA Test Management Plugin4.3 Medium
- jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreCSRF vulnerability in Jenkins Zephyr for JIRA Test Management Plugin4.3 Medium
- jenkins zap pipeline, jenkins project zap pipeline plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin5.4 Medium
- jenkins white source, jenkins project white source plugin +1 moreCredentials stored in plain text by Jenkins White Source Plugin4.3 Medium
- jenkins github coverage reporter, jenkins project github coverage reporter plugin +1 moreSecret stored in plain text by Jenkins GitHub Coverage Reporter Plugin4.3 Medium
- jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreRCE vulnerability in ElasticBox Jenkins Kubernetes CI/CD Plugin8.8 High
- Show moreLoading…