CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- bareos, bareos gmbh & co. kg director, debian linux +2 moreHeap-based Buffer Overflow in Bareos Director6.0 Medium
- linuxfoundation osqueryosquery susceptible to DLL search order hijacking of zlib1.dll5.3 Medium
- icehrmAn exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies...6.6 Medium
- sophos xg firewall firmwareA SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0...9.8 Critical
- nextcloud contactsA missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file...4.3 Medium
- citrix gateway plug-in for linuxImproper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in...7.8 High
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +2 morePrivilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30,...8.8 High
mbedtlsMageiaUpdated mbedtls packages fix security vulnerabilityNo score- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 moreImproper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,...4.3 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +3 more +5 moreImproper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18...6.5 Medium
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 moreImproper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18...6.1 Medium
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 moreReflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,...6.5 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 moreImproper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,...6.5 Medium
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 moreImproper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18...6.1 Medium
- devcertInjection and Command Injection in devcert9.8 Critical
- citrix application delivery controller firmware, netscaler gateway firmware +1 moreImproper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62...7.5 High
- citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +2 moreIncorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57...7.5 High
- vmware fusion, horizon client, remote console +2 moreVMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 )...7.8 High
- huawei p30, p30 firmware +1 moreHUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input...5.5 Medium
- huawei p30 firmware, p30 pro firmware +1 moreHUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and...6.5 Medium
- tobesoft xplatformXPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to...7.8 High
- raonwiz raon kupload, raon k upload +1 moreRAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files...7.8 High
- shirasagi project shirasagiOpen redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect...6.1 Medium
perfettoOSS-FuzzHeap-buffer-overflow in perfetto::trace_processor::ClockTracker::ConvertSlowpathNo score- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute...8.1 High
- ibm infosphere guardium activity monitor, security guardium insights +1 moreIBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization...3.1 Low
- northwestern timelinejs, nuknightlab timelinejs3 +1 moreStored XSS in TimelineJS37.2 High
- king-theme kingcomposerA reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for...6.1 Medium
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations9.4 Critical
- yubico yubikey 5 nfc firmwareAn information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5...5.3 Medium
- yubico yubikey 5 nfc firmwareA PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has...5.9 Medium
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect...4.3 Medium
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is...4.3 Medium
- atlassian bitbucket, bitbucket server +1 moreWebhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote...4.3 Medium
- atlassian bitbucket, bitbucket server +1 moreAtlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to...6.5 Medium
- red-gate sql monitorIn Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS...5.9 Medium
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security update6.5 Medium
- mozilla firefox for ios, firefox mobile +1 moreIndexedDB should be cleared when leaving private browsing mode and it is not, the API for...6.5 Medium
- mods-for-hesk mods for heskAn issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve...8.8 High
- mods-for-hesk mods for heskAn issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection...7.5 High
- mods-for-hesk mods for heskAn issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote...6.1 Medium
- mozilla firefoxBy navigating a tab using the history API, an attacker could cause the address bar to display the...4.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreFor native-to-JS bridging the app requires a unique token to be passed that ensures non-app code...4.3 Medium
- freebsdIn FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1,...9.8 Critical
- freebsdIn FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4...8.1 High
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote...7.1 High
- sockjs project sockjsDenial of Service (DoS)5.3 Medium
- google oauth client library for javaImproper Authorization7.4 High
- dlink dir-610 firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-610 devices allow Information Disclosure via SERVICES...7.5 High
- d-link dir-610 devices, dlink dir-610 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-610 devices allow Remote Command Execution via the cmd...8.8 High
- Show moreLoading…