CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
dracoOSS-FuzzHeap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocatNo scorelibvpxOSS-FuzzUNKNOWN READ in subpixel_ssse3.asm:1165No scorelibavcOSS-FuzzHeap-buffer-overflow in ih264d_compute_bs_non_mbaff_threadNo scoreunicornOSS-FuzzHeap-buffer-overflow in iotlb_to_region_mipsNo scoresuricataOSS-FuzzHeap-buffer-overflow in DefragInsertFragNo scoreimmerOSS-FuzzUNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operatorNo scorepicotlsOSS-FuzzHeap-buffer-overflow in ptls_set_negotiated_protocolNo scorelibexifOSS-FuzzUNKNOWN READ in exif_mnote_data_olympus_loadNo scorendpiOSS-FuzzStack-buffer-overflow in getTLScertificateNo scoredracoOSS-FuzzHeap-use-after-free in draco::Metadata::AddSubMetadataNo scoreopenscOSS-FuzzHeap-buffer-overflow in decode_bit_stringNo scorec-blosc2OSS-FuzzUNKNOWN READ in blosc_run_decompression_with_contextNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_memcachedNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_amazon_videoNo scorereadstatOSS-FuzzHeap-buffer-overflow in sas_read8No scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_mail_smtp_tcpNo scorelibhevcOSS-FuzzStack-use-after-return in ihevcd_process_threadNo scoremuparserOSS-FuzzHeap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulkNo scorelibhevcOSS-FuzzUse-of-uninitialized-value in ihevc_recon_32x32No scoresuricataOSS-FuzzHeap-use-after-free in DetectParseDupSigCompareFuncNo scorewavpackOSS-FuzzUse-of-uninitialized-value in decimate_dsd_runNo scorelibhevcOSS-FuzzGlobal-buffer-overflow in ihevcd_unpack_coeffsNo scoreopencvOSS-FuzzHeap-buffer-overflow in gtTileSeparateNo scorelibxlsOSS-FuzzHeap-buffer-overflow in xls_isCellTooSmallNo scorehtslibOSS-FuzzUNKNOWN WRITE in vcf_parse_formatNo scorehtslibOSS-FuzzHeap-buffer-overflow in hts_md5_updateNo scorendpiOSS-FuzzHeap-buffer-overflow in getTLScertificateNo scorelibvipsOSS-FuzzStack-buffer-overflow in write_png_commentNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_oscarNo scoreflacOSS-FuzzUNKNOWN READ in FLAC__crc16_update_words32No scoreopencvOSS-FuzzUNKNOWN in TIFFReadRGBATileExtNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLengthNo scorecrasOSS-FuzzHeap-buffer-overflow in surround51_to_stereo_downmix_mtxNo scoredracoOSS-FuzzSegv on unknown address in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDecoNo scorejsoncppOSS-FuzzHeap-buffer-overflow in Json::OurReader::readCommentNo scorearrowOSS-FuzzHeap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>No scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::HeaderField::HeaderFieldNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_irc_tcpNo score- nagios xiajaxhelper.php in Nagios XI before 5.7.2 allows remote attackers to execute arbitrary commands...8.8 High
- nagios xiGraph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.6.1 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could...7.5 High
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed...6.5 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which...6.8 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or...6.8 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can...6.2 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code...4.0 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that...5.1 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability7.5 High
- adobe magentoMagento php object injection vulnerability9.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerability6.1 Medium
- Show moreLoading…