CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability8.6 High
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability9.8 Critical
- cisco sd-wan solution, sd-wan firmware, vedge cloud router +1 more +3 moreCisco SD-WAN Solution Software Denial of Service Vulnerability8.6 High
- cisco data center network managerCisco Data Center Network Manager Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco data center network managerCisco Data Center Network Manager Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco webex meetings server, webex meetings +1 moreCisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability4.3 Medium
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w wireless-n vpn firewall firmware, rv130 vpn router firmware +1 more +3 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability8.1 High
- cisco rv110w wireless-n vpn firewall firmware, rv215w wireless-n vpn router firmware +1 moreCisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability9.8 Critical
- cisco rv110w wireless-n vpn firewall firmwareCisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability9.8 Critical
- cisco small business rv series router firmware, rv110w wireless-n vpn firewall firmware, rv130 vpn router firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability9.8 Critical
- cisco meeting app, meeting server +1 moreCisco Meetings App Missing TURN Server Credentials Expiration Vulnerability4.3 Medium
- cisco sd-wan, sd-wan vmanage +1 moreCisco SD-WAN Solution Software Static Credentials Vulnerability8.4 High
- cisco rv110w wireless-n vpn firewall firmware, rv110w firmware, rv215w firmware +2 moreCisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability5.9 Medium
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w wireless-n vpn firewall firmware, rv130 firmware +2 more +4 moreCisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities8.8 High
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities8.8 High
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability9.8 Critical
- cisco prime license managerCisco Prime License Manager Privilege Escalation Vulnerability9.8 Critical
- ibm external authentication server, sterling external authentication server, sterling secure proxy +2 moreIBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling...8.2 High
- ibm engineering lifecycle optimization - publishing, rational publishing engine +1 moreIBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization...4.3 Medium
- ibm collaborative lifecycle management, doors next, engineering workflow management +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...5.4 Medium
- ibm engineering workflow management, rational team concert +1 moreIBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- [unknown] kernelA stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager...4.4 Medium
- mit scratch-vmRemote Code Execution in scratch-vm9.8 Critical
- connectwise automateConnectWise Automate through 2020.x has insufficient validation on certain authentication paths,...9.8 Critical
kimageformatsOSS-FuzzUse-of-uninitialized-value in RGBTOHLSNo score- apache airflowRemote code execution (RCE) in Apache Airflow8.8 High
- abb irb140, irb140 firmware, irc5 firmware +2 moreRVD#3326: Hardcoded default credentials on IRC 5 OPC Server9.1 Critical
- abb irb140, robotware +1 moreRVD#3327: No authentication required for accesing ABB IRC5 FTP server9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect...6.7 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7....6.7 Medium
- openenclavex87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave5.3 Medium
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...5.3 Medium
- ufactory xarm 5 lite, xarm 6 and xarm 7, xarm 5 lite firmware, xarm 6 firmware +1 more +3 moreRVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS9.4 Critical
- silverstripeSilverstripe CMS XSS Vulnerability5.4 Medium
- ufactory xarm5 lite, xarm 6 and xarm 7, xarm 5 lite firmware +1 moreRVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks9.4 Critical
- silverstripe mimevalidator, recipe +1 moreSilverstripe CMS malicious file upload enables script execution8.8 High
- silverstripeSilverstripe CMS information disclosure7.5 High
- silverstripeSilverstripe has Incorrect Default Permissions5.3 Medium
- gpononu 1ge\+3fe\+wifi onu v2804rgw firmware, 1ge router wifi onu v2801rw firmware +1 moreGuangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9...7.2 High
- kronos web time and attendanceA Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com...6.5 Medium
- linuxfoundation harborHarbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788)4.3 Medium
- articatech artica proxyAn issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server...6.1 Medium
- librehealth ehrLibreHealth EMR v2.0.0 is affected by systemic CSRF.8.8 High
- librehealth ehrLibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary...9.0 Critical
- librehealth ehrLibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to...4.3 Medium
- ufactory xarm5 lite, xarm 6 and xarm 7, xarm studio +1 moreRVD#3321: No Authentication required to exert manual control of the robot9.1 Critical
- librehealth ehrLibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be...8.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2020 +3 more +5 moreAn invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below)...7.5 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2020 +3 more +5 moreAn untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity...7.8 High
- ajv.js ajvPrototype Pollution in Ajv5.6 Medium
- Show moreLoading…