CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- electronContext isolation bypass via Promise in Electron6.8 Medium
- realtek rtl8195am firmware, rtl8710af firmware, rtl8711af firmware +1 more +3 moreAn issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before...8.0 High
- hibernate orm, quarkus, redhat build of quarkus +7 more +9 moreSQL Injection in Hibernate ORM6.5 Medium
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition...6.3 Medium
- huawei p30 firmware, p30 pro firmware +1 moreHUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions...5.3 Medium
- huawei p30, p30 firmware +1 moreHUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature...5.5 Medium
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion...7.8 High
- huawei mate 30 pro firmwareHUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper...5.5 Medium
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free...7.8 High
- check point zonealarm point zonealarm, checkpoint zonealarm extreme security +1 moreZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who...8.8 High
- dell powerstore, emc powerstore 1000 firmware, emc powerstore 3000 firmware +3 more +5 moreDell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test...8.6 High
- dell emc isilon onefs, isilon onefs, emc powerscale onefs +2 moreDell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a...8.0 High
- dell vxrail, vxrail d560 firmware, vxrail d560f firmware +2 moreDell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A...9.8 Critical
- dell powerprotect data manager, power protect data manager, powerprotect x400 firmware +2 moreDell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions...7.7 High
- dell data protection advisor, emc data protection advisor +1 moreDell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability....8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.8 High
- huawei changxiang 8 plus firmwareChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service...5.3 Medium
- huawei hisuiteEarlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due...7.8 High
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...7.5 High
permissionsSUSESecurity update for permissionsNo scorepermissionsSUSESecurity update for permissionsNo scorepermissionsSUSESecurity update for permissionsNo score- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap27.7 High
- whoopsie project whoopsieThe parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation...5.5 Medium
- milkytracker project milkytracker, debian linux +1 morePlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric...5.5 Medium
- parall jspdfCross-site scripting in jspdf6.1 Medium
- parall jspdfCross-site Scripting (XSS)6.3 Medium
- roundcube webmail, debian linux +1 moreAn issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before...6.1 Medium
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.9.8 Critical
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.9.8 Critical
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.9.8 Critical
- bestsoftinc car rental systemAn issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress....6.1 Medium
- online hotel booking system project hotel booking systemAn issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for...6.1 Medium
- vanguard project vanguardAn issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new...6.1 Medium
- we-com municipality portal cmsXSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.6.1 Medium
- we-com municipality portal cmsSQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.9.8 Critical
- we-com opendata cmsWe-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.9.8 Critical
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...7.5 High
perl-YAMLMageiaUpdated perl-YAML packages fix security vulnerabilityNo score- gog galaxyAn issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible...7.8 High
- gog galaxyAn issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible...7.8 High
- valvesoftware steam clientAn issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to...7.8 High
- mozilla thunderbirdIf an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using...5.9 Medium
- python, netapp snapcenter, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 High
mozjpegcrates.iomozjpeg DecompressScanlines::read_scanlines is UnsoundNo score- ozone project ozoneDrop of uninitialized memory in Ozone9.8 Critical
- Show moreLoading…