CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
ndpiOSS-FuzzUse-of-uninitialized-value in ndpi_strdupNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_oracleNo scorearrowOSS-FuzzHeap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>No scorereadstatOSS-FuzzHeap-buffer-overflow in sas_read4No scorendpiOSS-FuzzUse-of-uninitialized-value in ndpi_fill_protocol_categoryNo score- luaLua through 5.4.0 mishandles the interaction between stack resizes and garbage collection,...8.8 High
- luaLua through 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c...9.8 Critical
- luajit, canonical ubuntu linux, debian linux +2 moreLuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is...7.5 High
- prestashop dashboard products, dashproducts +1 moreImproper access control on dashboard form in PrestaShop6.5 Medium
- 360totalsecurity 360 total securityIn the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome...7.8 High
- tc custom javascript project custom javascriptA stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2...6.1 Medium
- 360totalsecurity 360 total securityIn version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there...7.8 High
- 360totalsecurity 360 total securityIn the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total...7.8 High
- librenmsExposure of Resource to Wrong Sphere in LibreNMS8.8 High
- bitwarden serverBitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones...7.5 High
- pritunl pritunl-clientA flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification...7.5 High
- pritunl pritunl-clientA flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified...9.8 Critical
- librenmsLibreNMS SQL Injection vulnerability6.5 Medium
- qemu, debian linux +1 moreQEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an...3.3 Low
- phoenix contact plcnext engineerPHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.8.2 High
spirv-tools-develAlmaLinux,spirv-tools-libsAlmaLinux +1 morevulkan bug fix and enhancement updateNo scoreglassfish-annotation-apiAlmaLinux,icu4jAlmaLinux +1 morenew module: eclipse:rhel8No score- containers podman, redhat enterprise linux, openshift container platform +2 moreImproper Authorization in github.com/containers/libpod7.0 High
- mruby, debian linux +1 moremruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in...9.8 Critical
cockpit-podmanAlmaLinux,containernetworking-pluginsAlmaLinux,critAlmaLinux +6 more +8 morecontainer-tools:2.0 bug fix updateNo score- collaboraoffice collabora online development editionThe WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict...6.1 Medium
- sailsjs sailsImproper Input Validation in sails-hook-sockets7.5 High
arrowOSS-FuzzHeap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>No scorelibzmqOSS-FuzzUse-of-uninitialized-value in zmq::stream_engine_base_t::out_eventNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlParserPrintFileContextInternalNo scoreleptonicaOSS-FuzzHeap-buffer-overflow in rasteropGeneralLowNo scoreqtOSS-FuzzIndex-out-of-bounds in QUnicodeTables::qGetPropNo scorehermesOSS-FuzzHeap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePointNo scorecrasOSS-FuzzHeap-buffer-overflow in ccr_handle_message_from_clientNo score- ibm marketing operationsUsing HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download...8.1 High
- apache artemis, apache software foundation activemq artemis +1 moreCross-site Scripting (XSS) in Apache ActiveMQ Artemis6.1 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreInvalidating or changing user does not invalidate session3.5 Low
- amd radeon directx 11 driver atidxx64.dllAn exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon...9.9 Critical
- amd radeon directx 11 driver atidxx64.dllAn exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon...9.9 Critical
- duo duoconnect, cisco duo connect +1 moreDuoConnect SSH Connection Vulnerability4.8 Medium
- amd radeon directx 11 driver atidxx64.dllAn exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon...9.9 Critical
- amd radeon directx 11 driver atidxx64.dllAn exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000...9.9 Critical
- linux kernel, xen, netapp cloud backup +2 more +4 moreAn issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for...7.8 High
- radare radare2, fedoraproject fedora +1 moreCommand injection in Radare27.4 High
- torchbox wagtailCross-Site Scripting in Wagtail5.7 Medium
- cisco clamav, canonical ubuntu linux, debian linux +1 more +3 moreClam AntiVirus (ClamAV) Software Null Pointer Dereference Vulnerability7.5 High
- gofiber fiberCRLF vulnerability in Fiber4.2 Medium
- codecov, codecov codecov-node +1 moreCommand injection in codecov (npm package)9.3 Critical
- zte r5300g4 firmware, r5500g4 firmware, r8500g4 firmware +2 moreThe server management software module of ZTE has a storage XSS vulnerability. The attacker...6.1 Medium
- zte r5300g4 firmware, r5500g4 firmware, r8500g4 firmware +2 moreThe server management software module of ZTE has an authentication issue vulnerability, which...9.8 Critical
- Show moreLoading…