CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the...6.5 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when...7.6 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3...9.8 Critical
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3...8.8 High
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3...8.8 High
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3...6.2 Medium
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3...9.8 Critical
- apache kylinSQL Injection in Kylin9.8 Critical
- apache kylinCommand Injection in Kylin9.8 Critical
- rockwellautomation studio 5000 logix designerRockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an...3.3 Low
- elastic kibana, redhat openshift container platform +1 moreIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Medium
- sap disclosure managementLogout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the...4.6 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, session mechanism does not have expiration data set...5.4 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the...4.2 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request...4.3 Medium
- sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not...10.0 Critical
- sap se netweaver as java (lm configuration wizard), sap netweaver application server java +1 moreThe insufficient input path validation of certain parameter in the web service of SAP NetWeaver...5.3 Medium
- sap netweaver, sap se netweaver - xml toolkit for java (engineapi) +1 moreSAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7...7.7 High
- sap se netweaver as java (iiop service) (core-tools), netweaver as java (iiop service) (servercore), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7...5.8 Medium
- sap se business objects business intelligence platform (bi launchpad), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not...6.1 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with...2.7 Low
- sap se business objects business intelligence platform (bi launchpad and cmc), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2,...5.4 Medium
- sap se business objects business intelligence platform (bipodata), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (bipodata), version 4.2, does not...6.1 Medium
- sap disclosure managementSome sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag,...6.3 Medium
- misp-project mispIn MISP before 2.4.129, setting a favourite homepage was not CSRF protected.8.8 High
machcrates.iomach is unmaintainedNo scorendpiOSS-FuzzHeap-use-after-free in check_content_type_and_change_protocolNo scoredracoOSS-FuzzHeap-use-after-free in draco::Metadata::AddSubMetadataNo scorekeystoneOSS-FuzzUse-of-uninitialized-value in llvm_ks::isIntNNo scoreunicornOSS-FuzzIndex-out-of-bounds in tcg_liveness_analysis_armNo scoredracoOSS-FuzzUNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_traitNo scorewabtOSS-FuzzObject-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::No scorejbig2decOSS-FuzzUse-of-uninitialized-value in jbig2_arith_decodeNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_workflow_process_packetNo scoreflacOSS-FuzzUse-of-uninitialized-value in fuzzing::memory::memory_test_msanNo scorematioOSS-FuzzUse-of-uninitialized-value in inflateNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_netbios_name_interpretNo scorelibpcapOSS-FuzzUse-of-uninitialized-value in pcap_filter_with_aux_dataNo scorendpiOSS-FuzzSegv on unknown address in process_ndpi_collected_infoNo scorematioOSS-FuzzUNKNOWN READ in H5MM_xstrdupNo scoreqpdfOSS-FuzzUse-of-uninitialized-value in read_markersNo scoreunicornOSS-FuzzUNKNOWN READNo scoredracoOSS-FuzzUNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::cNo scorematioOSS-FuzzHeap-buffer-overflow in ReadInt32DataDoubleNo scorekeystoneOSS-FuzzUse-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbiNo scorematioOSS-FuzzUse-of-uninitialized-value in Mat_VarRead5No scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_setup_iaxNo scorepopplerOSS-FuzzUse-of-uninitialized-value in Splash::pipeRunSimpleXBGR8No scorelibhevcOSS-FuzzUse-of-uninitialized-value in ihevc_inter_pred_chroma_copy_ssse3No score- Show moreLoading…