CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- schneider-electric easergy builderA CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in...7.8 High
- schneider-electric easergy builderA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy...7.8 High
- schneider-electric tricon tcm 4351 firmware, tricon tcm 4351a firmware, tricon tcm 4351b firmware +4 more +6 more**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon...7.5 High
- schneider-electric software update utilityA CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider...4.7 Medium
- bec technologies multiple routers, d-link dir-867 firmware, dir-878 firmware +1 more +3 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- d-link dir-842, dlink dir-842 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- d-link dap-1860, dlink dap-1860 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.0 High
- avertx hd438 firmware, hd838 firmware +1 moreAn issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838...5.3 Medium
- avertx hd438 firmware, hd838 firmware +1 moreAn issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838...9.8 Critical
- avertx hd438 firmware, hd838 firmware +1 moreAn issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838...6.8 Medium
- inneo startup toolsAn issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70...9.8 Critical
- raspberrytorte raspberrytortoiseThe WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via...9.8 Critical
- devspaceDevSpace vulnerable to remote code execution9.8 Critical
- woocommerce subscriptionsPersistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote...6.1 Medium
parsenpmStoring Password in Local StorageNo score- claws-mail, fedoraproject fedora, opensuse backports sle +1 more +3 morecommon/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after...9.8 Critical
- tenda ac15 firmwaregoform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to...9.8 Critical
- kubernetesKubernetes node disk Denial of Service by writing to container /etc/hosts5.5 Medium
- ibm filenet content managerIBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This...5.4 Medium
- espressif esp-idf, esp8266 nonos sdk, esp8266 rtos sdk +2 moreAn encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2,...6.8 Medium
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to create a denial-of-service condition on affected...7.5 High
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to issue commands on affected installations of C-MORE...9.8 Critical
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.9 Medium
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to bypass authentication on affected installations of...7.5 High
- kubernetesCredential leakage when failing to mount5.9 Medium
- tesla model 3 firmware** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a...6.5 Medium
- windriver vxworkshttpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from...7.5 High
- munki facts project factsMunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability6.1 Medium
- munkireport project munkireportA CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to...8.1 High
- managedinstalls project managedinstallsMunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability6.1 Medium
- munkireport project munkireportA SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to...8.8 High
- munkireport project commentMunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment5.4 Medium
- reportdata project reportdataMunkiReport reportdata module SQL injection vulnerability8.8 High
- softwareupdate project softwareupdateMunkiReport Software Update module is vulnerable to SQL injection8.8 High
- embedthis goaheadGoAhead before 5.1.2 mishandles the nonce value during Digest authentication. This may permit...8.8 High
perl-YAML-LibYAMLSUSESecurity update for perl-YAML-LibYAMLNo scoreMozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo score- cauldrondevelopment c\!tar/TarFileReader.cpp in Cauldron cbang (aka C-Bang or C!) before 1.6.0 allows Directory...7.5 High
- parse-community parse-server, parseplatform parse server +1 moreInformation disclosure through Viewer query in parse-server6.5 Medium
- nec esmpro managerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- pypi bsdiff4bsdiff4 out-of-bounds write via patch file7.8 High
arrowOSS-FuzzHeap-buffer-overflow in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::LiNo scoreopenscOSS-FuzzHeap-use-after-free in sc_pkcs15_free_objectNo scoremuparserOSS-FuzzHeap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulkNo scorecurlOSS-FuzzNegative-size-param in fuzz_tlv_to_stringNo scoresuricataOSS-FuzzUNKNOWN WRITE in StatsIncrNo scorepopplerOSS-FuzzUse-of-uninitialized-value in Gfx::fillPatchNo scorelibxsltOSS-FuzzIndex-out-of-bounds in xsltSetAttrVTsegmentNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::GtpV1Layer::GtpExtension::getNextExtensionHeaderTypeNo score- Show moreLoading…