CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- simpleledger slp-validate, slp-validate.js +1 moreFalse-positive validity for NFT1 genesis transactions in SLP Validate7.5 High
- simpleledger slpjsFalse-positive validity for NFT1 genesis transactions in SLPJS7.5 High
- nagios log serverA Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods ...5.4 Medium
- hmtalk daviewindy, humantalk davieindy +1 moreDaviewIndy Heap-based Buffer Overflow Vulnerability7.8 High
- hmtalk daviewindy, humantalk davieindy +1 moreDaviewIndy Heap-based Buffer Overflow Vulnerability7.8 High
- hmtalk daviewindy, humantalk davieindy +1 moreDaviewIndy Use-After-Free Vulnerability7.8 High
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user...5.3 Medium
- abus secvest hybrid fumo50110 firmwareThe ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures...9.1 Critical
- dp3t-backend-software development kit project development kitAn issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T). When it is configured to check JWT before uploading/publishing keys, it is possi…7.5 High
- pi-holeAn issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to...7.8 High
- pi-holePi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges...7.8 High
- ibm security guardiumIBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page...5.3 Medium
- ibm security guardiumIBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms...5.9 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreA path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an...6.8 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreA path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an...4.9 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreA denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an...6.5 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreAn insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows...7.2 High
- ivanti connect secure, policy secure, pulsesecure pulse policy secure +2 moreA code injection vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker to...7.2 High
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreA cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to...5.4 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreAn information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an...4.3 Medium
- ui unifi protect, unifi protect for unifi cloud key gen2 plus +1 moreAn information exposure vulnerability exists in UniFi Protect v1.13.3 and prior that allowed...5.3 Medium
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreAn improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an...8.1 High
- ivanti connect secure, pulsesecure pulse connect secure, ivanti policy secure +1 more +3 moreA cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.6.1 Medium
- nextcloud preferred providersImproper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial...5.3 Medium
- @clerk fastifyDenial of service in fastify6.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm saipan firmware, sm8250 firmware +1 more +3 moreUse after free issue while processing error notification from camx driver due to not properly...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 morePossible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, nicobar firmware +7 more +9 moreUse-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 moreMemory corruption can occurs in trusted application if offset size from HLOS is more than actual...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 moreMemory failure in content protection module due to not having pointer within the scope in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 morePossible buffer overflow and over read possible due to missing bounds checks for fixed limits if...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096 firmware +55 more +57 moreOut of bounds read can happen in diag event set mask command handler when user provided length in...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9207c firmware +7 more +9 moreRegister write via debugfs is disabled by default to prevent register writing via debugfs. in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +26 more +28 moreDevice misbehavior may be observed when incorrect offset, length or number of buffers is passed...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +29 more +31 moreArray out of bound access can occur in display module due to lack of bound check on input parcel...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +29 more +31 moreClose and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon...7.8 High
- express-fileupload project express-fileupload, netapp max data +1 morePrototype Pollution7.5 High
- toyota global techstream, toyota motor corporation global techstream (gts) for toyota dealers +1 moreGlobal TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to...7.8 High
phpOSS-FuzzHeap-use-after-free in destroy_op_arrayNo scoregrub2Debiangrub2 - regression updateNo score- net-snmp, canonical ubuntu linux, netapp cloud backup +3 more +5 moreNet-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND...7.8 High
- seafile seafile-clientThe seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads...7.8 High
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.5.9 Medium
- beronet voice over internet protocol gateways firmwareberoNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files,...7.5 High
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH...8.8 High
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service...7.5 High
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due...7.5 High
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command...7.8 High
- kubevirt, redhat openshift virtualization +1 morePrivilege Escalation in kubevirt9.9 Critical
- gnome evolution-data-server, debian linux +1 moreIn GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...5.9 Medium
- Show moreLoading…