CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- nediNeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- turn\! project turn\!Remote code execution in turn extension for TYPO38.8 High
- hcltech appscan"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could...4.3 Medium
- hcltech appscan"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially...6.1 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- nediNeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker...5.4 Medium
- venki supravizio bpmVenki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An...9.8 Critical
- venki supravizio bpmA user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs...5.3 Medium
- nordicsemi android ble library, dfu library +1 moreNordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android...6.5 Medium
- gitlabGitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload...5.3 Medium
- mittwald typo3 forumIncorrect access control in typo3_forum5.3 Medium
- jh captcha project captchajh_captcha for Typo3 XSS Vulnerability5.4 Medium
- mm forum project forumCross-Site Request Forgery in mm_forum5.4 Medium
- faceted search project searchke_search for Typo3 XSS Vulnerability5.4 Medium
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....7.5 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The...5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets)...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an...5.5 Medium
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers...6.1 Medium
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case...7.5 High
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case...6.1 Medium
- solarwinds serv-uSolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.7.5 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor...6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a...8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash...6.5 Medium
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...7.5 High
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...9.8 Critical
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...7.5 High
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...7.5 High
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...7.5 High
- mitsubishielectric coreos, mitsubishi electric corporation got2000 series gt27, gt25, and gt23 +1 moreTCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with...9.8 Critical
- mobileiron core, monitor and reporting database, sentry +2 more +4 moreMobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...9.8 Critical
- mobileiron core, cloud, enterprise connector +2 more +4 moreMobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...9.8 Critical
- mobileiron core, cloud, enterprise connector +2 more +4 moreMobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...7.5 High
- electronArbitrary file read via window-open IPC in Electron6.8 Medium
- electronContext isolation bypass via contextBridge in Electron7.7 High
- electronContext isolation bypass via leaked cross-context objects in Electron7.8 High
- Show moreLoading…