CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
freetype2OSS-FuzzUNKNOWN READ in BZ2_decompressNo scorekeystoneOSS-FuzzHeap-use-after-free in llvm_ks::X86Operand::getTokenNo scorematioOSS-FuzzUNKNOWN READ in H5T__bit_findNo scoreusrsctpOSS-FuzzHeap-buffer-overflow in sctp_handle_packet_droppedNo scorelibzmqOSS-FuzzBad-cast to zmq::session_base_t from invalid vptrNo scorewabtOSS-FuzzUNKNOWN READ in wabt::BinaryReaderIR::OnFunctionSymbolNo scorematioOSS-FuzzUNKNOWN READ in H5O_dtype_decode_helperNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in __libcpp_memchrNo scorendpiOSS-FuzzSegv on unknown address in ndpi_strdupNo scoredracoOSS-FuzzHeap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocatNo scorearrowOSS-FuzzNegative-size-param in arrow::ConcatenateBuffersNo scorec-blosc2OSS-FuzzUse-of-uninitialized-value in blosc_run_decompression_with_contextNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_kerberosNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessageNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in __libcpp_strstrNo scorepermissionsopenSUSESecurity update for permissionsNo score- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)....3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions...3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions...5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....4.8 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise for 32-bit systems +2 more +4 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
standard-versionnpmCommand Injection in standard-versionNo score- [unknown] docker, redhat enterprise linux server +1 moreThe docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise...8.8 High
- [unknown] docker, redhat enterprise linux server, openshift container platform +2 moreThe version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053...8.8 High
- supremainc biostar 2An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote...7.5 High
- tenda ac15 firmware, ac1900 router ac15 model +1 moreThe goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers...9.8 Critical
- tenda ac15 firmwareAn XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows...6.1 Medium
- tenda ac15 firmwareA hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19...9.8 Critical
- tenda ac15 firmwareA CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19...6.5 Medium
- srs simple hits counter project simple hits counterImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS...7.5 High
- pandorafms pandora fmsPandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A...9.0 Critical
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could...5.9 Medium
- embedthis appwebAppweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request...7.5 High
- atlassian jira, jira server +1 moreThe login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1...6.1 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles...4.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...4.8 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreThe Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote...5.3 Medium
- atlassian jira, jira server, jira software data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to access...7.5 High
- atlassian jira, jira server, jira data center +1 more +3 moreThe avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows...6.5 Medium
chromiumDebianchromium - regression updateNo score- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block...10.0 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 High
- django two-factor authentication project two-factor authentication, bouke django-two-factor-auth +1 moreIn Django Two-Factor Authentication, user passwords are stored in clear text in the Django session5.4 Medium
- bareosAuthentication bypass in Bareos6.8 Medium
- Show moreLoading…