CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- ibm mq applianceIBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker...5.9 Medium
- ibm mq applianceIBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under...3.1 Low
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC),...5.4 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC),...5.4 Medium
- ibm mq applianceIBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by...5.1 Medium
- openbsdiked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has...9.8 Critical
phpOSS-FuzzUNKNOWN in zend_ast_export_exNo scorestbOSS-FuzzUse-of-uninitialized-value in stbi__jpeg_huff_decodeNo scorelibrawOSS-FuzzIndex-out-of-bounds in DHT::hide_hotsNo scoreflacOSS-FuzzUNKNOWN WRITE in FLAC__bitwriter_write_raw_uint32_nocheckNo scoretpm2OSS-FuzzIndex-out-of-bounds in MemoryRemoveTrailingZerosNo scorekeystoneOSS-FuzzInvalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImplNo scoreopen62541OSS-FuzzUse-of-uninitialized-value in UA_Array_copyNo scorematioOSS-FuzzSegv on unknown address in H5O_chunk_deserializeNo scorestbOSS-FuzzHeap-buffer-overflow in load_jpeg_imageNo scorestbOSS-FuzzHeap-buffer-overflow in stbi__YCbCr_to_RGB_simdNo scorerdkitOSS-FuzzUNKNOWN READ in RDKit::labelRecursivePatternsNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scoreopen62541OSS-FuzzUse-of-uninitialized-value in txt2sdNo scorelibsassOSS-FuzzBad-cast to Sass::PreValue from Sass::Unary_ExpressionNo scorelibrawOSS-FuzzIndex-out-of-bounds in DHT::get_hv_rbgNo scoreopenvswitchOSS-FuzzHeap-buffer-overflow in format_generic_odp_keyNo scoreunicornOSS-FuzzUse-of-uninitialized-value in float64_squash_input_denormal_aarch64ebNo scoreunicornOSS-FuzzUNKNOWN READ in cpu_arm_exec_armebNo scoreqpdfOSS-FuzzUse-of-uninitialized-value in QPDFWriter::unparseObjectNo scoreradare2OSS-FuzzHeap-buffer-overflow in parse_relocation_infoNo scoreopenvswitchOSS-FuzzUse-of-uninitialized-value in nl_attr_is_validNo scorestbOSS-FuzzUse-of-uninitialized-value in stbi__jpeg_decode_block_prog_acNo scoreyaraOSS-FuzzHeap-buffer-overflow in dotnet_parse_comNo scoreunicornOSS-FuzzSegv on unknown address in helper_uc_tracecodeNo scorestbOSS-FuzzIndex-out-of-bounds in stbi__build_huffmanNo scorepcapplusplusOSS-FuzzBad-cast to pcpp::IDnsResource from invalid vptrNo scorerdkitOSS-FuzzHeap-use-after-free in RDKit::SubstanceGroup::addParentAtomWithBookmarkNo scoreclamavOSS-FuzzUNKNOWN READ in cli_vba_readdir_newNo scorelibrawOSS-FuzzUse-of-uninitialized-value in LibRaw::init_fuji_blockNo score- cherokee-project cherokeeCherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences....7.5 High
- trusteddomain opendmarc, debian linux, fedoraproject fedora +2 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the...9.8 Critical
- ivanti connect secure, policy secure, pulsesecure pulse connect secure +1 more +3 moreAn issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual...5.5 Medium
- osisoft pi visionOSIsoft PI System6.5 Medium
- kubernetesKubernetes node setting allows for neighboring hosts to bypass localhost boundary5.4 Medium
- grundfos cim 500Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to...7.5 High
- microsoft windows 10 version 1709 for 32-bit systems, windows 10 version 1709 for arm64-based systems, windows 10 version 1709 for x64-based systems +16 more +18 moreA remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library...7.8 High
- microsoft windows 10 version 1709 for 32-bit systems, windows 10 version 1709 for arm64-based systems, windows 10 version 1709 for x64-based systems +16 more +18 moreA remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library...7.8 High
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreIn Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS...6.7 Medium
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreKibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An...4.8 Medium
- ihatemoney i hate money, spiral-project ihatemoney +1 moreAuthorization Bypass in I hate money4.9 Medium
- riverbed steelcentral aternity agentSteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running...7.8 High
- riverbed steelcentral aternity agentSteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a...7.5 High
- ibm mq applianceIBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve...4.1 Medium
- ibm qradar advisor, qradar advisory +1 moreThe IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately...4.2 Medium
- Show moreLoading…