CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- amazon toughImproper verification of signature threshold in tough8.6 High
- mercari, mercari, inc. android app 'mercari' (japan version) +1 moreAndroid App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution...8.1 High
c-bloscOSS-FuzzHeap-buffer-overflow in blosclz_compressNo scorearrowOSS-FuzzHeap-buffer-overflow in arrow::ConcatenateBuffersNo scorearrowOSS-FuzzHeap-buffer-overflow in void arrow::internal::TransferBitmap<No scorecrasOSS-FuzzHeap-buffer-overflow in cras_channel_remix_conv_createNo scorelibspngOSS-FuzzUse-of-uninitialized-value in spng_read_fuzzer.cNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlParserPrintFileContextInternalNo score- nvidia jetpack software development kit, jetson agx xavier, tx1, tx2, and nano l4t +1 moreNVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in...7.8 High
- phplistAn issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability...8.8 High
- phplistAn issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import...5.4 Medium
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in GlobalProtect portal8.1 High
- palo alto networks pan-osPAN-OS: Integer underflow in the management interface4.9 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management interface7.2 High
- palo alto networks pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services4.8 Medium
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreServer side template injection in Apache Camel7.5 High
- symantec endpoint detection and responseSymantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information...7.5 High
- tableau serverA sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x...7.5 High
- arista velocloud orchestrator, vmware sd-wan by velocloud +1 moreThe VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL...8.8 High
- hp icewall sso dfw, icewall sso dgfw +1 moreA security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be...6.1 Medium
- mxplayer mx playerMX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal...8.8 High
- micro fosus identity managerElevation of privilege and unauthorized access in Micro Focus Identity Manager product9.8 Critical
- geovision door access control device, gv-as1010 firmware, gv-as210 firmware +4 more +6 moreGeoVision Door Access Control Device - Buffer overflow vulnerability9.8 Critical
- mozilla firefoxWhen the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one...7.8 High
- ffmpegA CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter...6.5 Medium
- ffmpegFFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a...6.5 Medium
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...5.9 Medium
- cmsuno project cmsunoAn issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.6.5 Medium
- victor cms project cmsVictor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.6.1 Medium
- google llc wpantundMemory leak in wpanctl can lead to DoS5.0 Medium
- connectwise automateA SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A...7.5 High
- code42Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote...7.2 High
- socket.io-file project socket.io-filePath Traversal in socket.io-file7.5 High
- phpzag, phpzag live add edit delete data tables records with ajax php mysql +1 moreSQL injection with start and length parameters in Records.php for phpzag live add edit delete...9.8 Critical
- phpzag, phpzag live add edit delete data tables records with ajax php mysql +1 moreSQL injection in order and column parameters in Records.php for phpzag live add edit delete data...9.8 Critical
- phpzag, phpzag live add edit delete data tables records with ajax php mysql +1 moreSQL injection with the search parameter in Records.php for phpzag live add edit delete data...9.8 Critical
- protocol gossipsubGossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil...9.8 Critical
npm-registry-fetchnpmSensitive information exposure through logs in npm-registry-fetch5.3 Medium- cli, npmjs npm, fedoraproject fedora +1 more +3 moreSensitive information exposure through logs in npm cli4.4 Medium
- webchess project webchessWebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.9.8 Critical
com.upokecenter:cborMavenDenial of service due to reference expansion in versions earlier than 4.0No score- riot-os riotRIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode()...9.8 Critical
gos/web-socket-bundlePackagistPotentially sensitive data exposure in Symfony Web Socket Bundle5.9 Medium- mapfish mapfish-print, print +1 moreCross-site scripting attack in mapfish-print9.3 Critical
- mapfish mapfish-print, print +1 moreXML External Entity attack in mapfish-print9.3 Critical
- froala editorDOM-based cross-site scripting in Froala Editor6.1 Medium
- telefonica o2 businessThe O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to...6.1 Medium
- Show moreLoading…