CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- gnome balsa, opensuse backports sle, leap +2 moreIn GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL...7.5 High
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central before 10.0.533....9.8 Critical
- nec sv8100 firmwareOn Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented,...9.8 Critical
- nec sl1100 firmware, sl2100 firmware, sv8100 firmware +1 more +3 moreAn attacker with access to an InMail voicemail box equipped with the find me/follow me feature on...6.5 Medium
- nec um4730 firmware, um8000 firmware +1 moreNEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may...9.1 Critical
- nec um8000 firmwareAn attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use...7.8 High
- nec sl1100 firmware, sl2100 firmware, sv8100 firmware +1 more +3 moreAn exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire...8.8 High
- nec sl1100 firmware, sl2100 firmware, sv8100 firmware +1 more +3 moreAspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100,...7.5 High
- nec sl1100 firmware, sl2100 firmware, sv8100 firmware +1 more +3 moreAspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases...9.8 Critical
- nec sv9100 firmwareThe WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote...7.5 High
- nec sv9100 firmwareCertain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into...9.8 Critical
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim6.4 Medium
- canonical core, snapd, ubuntu linux +2 morelocal snapd exploit through cloud-init7.3 High
- auth0 auth0.js, node-auth0 +1 moreAuthorization header is not sanitized in an error object in auth07.7 High
- typo3, typo3 cms +1 moreMissing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS8.8 High
- typo3, typo3 cms +1 moreExposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS8.1 High
- friendsoftypo3 mediacePotential Remote Code Execution in TYPO3 with mediace extension9.8 Critical
- teamviewerTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A...8.8 High
git-tags-remotenpmCommand Injection in git-tags-remote7.2 High- kubernetes ingress-nginxKubernetes ingress-nginx Compromise of auth via subset/superset namespace names5.9 Medium
- kitodo kitodo.presentationCross-site Scripting vulnerability in Kitodo.Presentation6.1 Medium
- ibm planning analytics, planning analytics local +1 moreIBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm planning analytics, planning analytics local +1 moreIBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the...6.1 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by...7.4 High
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to...5.3 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the...6.5 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that...8.6 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection...8.2 High
- freemedsoftware openclinic gaOpenClinic GA9.4 Critical
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA6.3 Medium
- sick package analyticsPasswords are stored in plain text within the configuration of SICK Package Analytics software up...6.5 Medium
- sick package analyticsSICK Package Analytics software up to and including version V04.0.0 are vulnerable due to...7.5 High
- sick package analyticsSICK Package Analytics software up to and including version V04.0.0 are vulnerable to an...9.8 Critical
- freemedsoftware openclinic gaOpenClinic GA8.8 High
librsvgUbuntulibrsvg regressionNo score- mock2easy project mock2easyCommand Injection9.8 Critical
- gerapyCommand Injection8.1 High
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA5.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA8.8 High
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA8.8 High
- open source openclinic ga, openclinic ga project ga +1 moreOpenClinic GA6.2 Medium
drupal/groupPackagistThis module enables you to hand out permissions on a smaller subset, section or community of your website. The module used to leverage the node grants system but turned it off in its recent 8.x-1.0 re…No score- adobe magentoMagento DOM-based Cross-site scripting vulnerability9.6 Critical
- adobe magentoMagento security mitigation bypass vulnerability6.5 Medium
- adobe magentoMagento observable timing discrepancy vulnerability4.2 Medium
- adobe magentoMagento path traversal vulnerability6.5 Medium
- kujirahand konawikiDirectory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read...5.3 Medium
- kujirahand konawikiCross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to...6.1 Medium
- kujirahand konawikiCross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to...6.1 Medium
- Show moreLoading…