CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- articatech artica proxyAn issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these...6.1 Medium
- articatech artica proxyAn issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the...7.5 High
- docsifyjs docsifyCross-site Scripting in docsify6.1 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE7.3 High
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE4.3 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE7.5 High
- servey project serveyPath traversal in servey7.5 High
- automattic canvasBuffer overflow in canvas8.8 High
- transloadit uppyServer-Side Request Forgery in @uppy/companion7.5 High
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE9.0 Critical
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing...6.5 Medium
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system...9.8 Critical
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account...9.8 Critical
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote...6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, apple ipados, iphone os +8 more +10 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote...7.8 High
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused...5.9 Medium
- ibm mq for hpe nonstopIBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a...6.5 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by...4.3 Medium
- asus screenpad2 upgrade toolAsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool...7.8 High
MozillaFirefoxSUSESecurity update for MozillaFirefoxNo scoremumbleopenSUSESecurity update for mumbleNo score- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP have Insecure Deserialization Vulnerability8.1 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection8.3 High
- huawei mate 30 pro, mate 30 pro firmware +1 moreHuawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an...6.5 Medium
- huawei ips module, ngfw module, secospace usg6300 +9 more +11 moreThere is an out-of-bounds write vulnerability in some products. An unauthenticated attacker...6.5 Medium
- Show moreLoading…