CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- huawei cloudengine 12800, cloudengine 5800, cloudengine 6800 +5 more +7 moreThere is a information leak vulnerability in some Huawei products, and it could allow a local...3.3 Low
- huawei honor 10, honor 10 firmware +1 moreHuawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of...5.5 Medium
- huawei honor v30, honor v30 firmware +1 moreHuawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper...6.5 Medium
- huawei honor magic2, mate 20, mate 20 rs +5 more +7 moreHUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier...2.3 Low
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions...8.8 High
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions...7.8 High
- huawei moana-al00b, moana-al00b firmware +1 moreHuawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing...5.5 Medium
- grundfos cim 500, cim 500 firmware +1 moreGrundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.7.5 High
- teltonika-networks gateway trb245 firmwareInsufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote,...5.4 Medium
- icegram email subscribers \& newslettersCross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8...6.5 Medium
- icegram email subscribers \& newslettersImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram...4.9 Medium
- hp nagios-plugins-hpiloHP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection...9.8 Critical
- hp mse msg gw application e-ltuHPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU...6.6 Medium
- hmtalk daviewindyDaviewIndy Heap Overflow Vulnerability7.8 High
- hcl bigfix webuiHCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software...5.4 Medium
- jupyterhub kubespawnerPossible pod name collisions in jupyterhub-kubespawner6.8 Medium
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command...9.8 Critical
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command...8.8 High
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command...9.8 Critical
- glpi-project glpiSQL Injection in glpi7.1 High
- grandstream gwn7000 firmware, tenable grandstream gwn7000 +1 moreGrandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to...8.8 High
- google android, opensuse leap +1 moreIn cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could...6.4 Medium
- google androidIn notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due...7.8 High
- westerndigital wd discoveryIn Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard...8.8 High
- hcltech marketing campaign"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign...5.4 Medium
- hcltech marketing campaign"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and...5.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak7.5 High
- juniper networks junos space, opennms +1 moreJunos Space: OpenNMS is accessible via port 94435.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE on the line card may crash due to memory leak.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled9.8 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Services card might restart when DNS filtering is enabled8.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.7.5 High
- graylogImproper Certificate Validation in Graylog8.1 High
- jalios jcmsjcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types...5.3 Medium
- sonicwall netextenderSonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this...7.8 High
- sonicwall sonicosSonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction ...5.3 Medium
- golang go, opensuse leap +1 moreIn Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the...5.3 Medium
- golang go, cloudfoundry cf-deployment, routing-release +3 more +5 moreGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Medium
- gnu libredwgGNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.6.5 Medium
- kramdown project kramdown, canonical ubuntu linux, debian linux +1 more +3 moreUnintended read access in kramdown gem9.8 Critical
- tobesoft miplatform, miplatform 320, 320u, 330, 330u +1 moreA vulnerability exists that could allow the execution of operating system commands on systems...8.8 High
- Show moreLoading…