CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an...3.1 Low
- grafana, netapp e-series performance analyzer +1 moreGrafana stored XSS5.4 Medium
- huawei mate 20, p30 firmware +1 moreHUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper...2.4 Low
- huawei p30, p30 firmware +1 moreHUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information...3.3 Low
- encode uvicornHTTP Response Splitting5.3 Medium
- encode uvicornLog Injection3.7 Low
- social rocket sharing plugin, wpsocialrocket social sharing +1 moreCross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10...8.8 High
- libetpan project libetpan, debian linux, fedoraproject fedora +1 more +3 moreLibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS...7.4 High
- kde kmail, debian linux +1 moreKDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI...6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDP3.5 Low
perl-YAML-LibYAMLopenSUSESecurity update for perl-YAML-LibYAMLNo scoreperl-YAML-LibYAMLopenSUSESecurity update for perl-YAML-LibYAMLNo score- fast-http project fast-httpDirectory Traversal7.5 High
- rollup-plugin-dev-server project rollup-plugin-dev-serverDirectory Traversal7.5 High
- indo-mars marscodeDirectory Traversal7.5 High
- marked-tree project marked-treeDirectory Traversal7.5 High
- rollup-plugin-server project rollup-plugin-serverDirectory Traversal7.5 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow....5.3 Medium
- osisoft pi visionIn OSIsoft PI System multiple products and versions, an authenticated remote attacker with write...4.8 Medium
- osisoft pi data archiveIn OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could...7.5 High
- aveva pi data archiveOSIsoft PI System5.9 Medium
- pi data archiveIn OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash...5.3 Medium
- osisoft pi api, pi buffer subsystem, pi connector +6 more +8 moreIn OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect...7.8 High
- osisoft pi api, pi buffer subsystem, pi connector +6 more +8 moreIn OSIsoft PI System multiple products and versions, a local attacker can plant a binary and...7.8 High
- osisoft pi api, pi buffer subsystem, pi connector +6 more +8 moreIn OSIsoft PI System multiple products and versions, a local attacker can modify a search path...7.8 High
- fortinet fortiosAn improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and...9.8 Critical
- jpeg-js project jpeg-jsUncontrolled resource consumption in jpeg-js5.5 Medium
- citrix workspace app for windows, workspace +1 moreImproper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege...8.8 High
- luaLua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g., when called by...5.5 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- overwolfOverwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of...8.8 High
- lenovo drivers managementAn unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version...7.3 High
- lenovo drivers managementA DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7...7.3 High
- parallels remote application serverParallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code...9.9 Critical
- red hat wildfly, redhat amq, jboss-ejb-client +4 more +6 moreWildfly EJB Client causes DoS6.5 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject...5.4 Medium
- midasolutions eframeworkMultiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework...5.4 Medium
- midasolutions eframeworkA Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2...6.1 Medium
- midasolutions eframeworkThere is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to...9.8 Critical
- midasolutions eframeworkMida eFramework through 2.9.0 has a back door that permits a change of the administrative...9.8 Critical
- midasolutions eframeworkThere is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve...9.8 Critical
- midasolutions eframeworkMida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.7.5 High
- midasolutions eframeworkThere is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure....7.5 High
libvipsOSS-FuzzSegv on unknown address in vips_XYZ2Lab_lineNo score- openbsd openssh, broadcom fabric operating system, netapp a700s firmware +9 more +11 morescp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...7.4 High
- red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 moreA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...6.5 Medium
- schneider-electric easergy builderA CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2...7.5 High
- schneider-electric easergy builderA CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and...7.5 High
- schneider-electric easergy builderA CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder ...5.5 Medium
- schneider-electric easergy builderA CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy...7.8 High
- Show moreLoading…