CVEs published in August 2020

1,282 vulnerabilities, 128 critical, 10 exploited.

• validator npm Regular Expression Denial of Service in validator CVE-2014-8882 Fix available 7.5 HighAugust 31, 2020
• ungit npm Command Injection in ungit CVE-2015-4130 Fix available No scoreAugust 31, 2020
• nhouston npm Directory Traversal in nhouston CVE-2014-8883 5.3 MediumAugust 31, 2020
• jquery-ujs npm CSRF Vulnerability in jquery-ujs GHSA-6qqj-rx4w-r3cj Fix available 6.5 MediumAugust 31, 2020
• ep_imageconvert npm Unauthenticated Remote Command Injection in ep_imageconvert CVE-2013-3364 Fix available 8.2 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not... CVE-2020-25057 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A... CVE-2020-25059 7.5 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software.... CVE-2020-25060 7.8 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network... CVE-2020-25061 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 9 and 10 software.... CVE-2020-25062 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software.... CVE-2020-25063 7.5 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8... CVE-2020-25064 7.5 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8... CVE-2020-25065 7.5 HighAugust 31, 2020
• google android An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The... CVE-2020-25058 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The... CVE-2020-25046 5.5 MediumAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and... CVE-2020-25047 5.5 MediumAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the... CVE-2020-25048 4.6 MediumAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.... CVE-2020-25049 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC... CVE-2020-25050 7.5 HighAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can... CVE-2020-25051 7.5 HighAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H... CVE-2020-25052 9.8 CriticalAugust 31, 2020
• samsung exynos An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem... CVE-2020-25054 9.1 CriticalAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The... CVE-2020-25055 9.8 CriticalAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL... CVE-2020-25056 7.5 HighAugust 31, 2020
• google android An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software.... CVE-2020-25053 9.8 CriticalAugust 31, 2020
• zyxel vmg5313-b30b firmware Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of... CVE-2020-24354 8.8 HighAugust 31, 2020
• sick clv620 firmware, clv621 firmware, clv622 firmware +27 more +29 more Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in... CVE-2020-2075 7.5 HighAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote... CVE-2020-6571 Fix available 4.3 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to... CVE-2020-6570 Fix available 4.3 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who... CVE-2020-6569 Fix available 6.3 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183... CVE-2020-6568 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient validation of untrusted input in command line handling in Google Chrome on Windows... CVE-2020-6567 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote... CVE-2020-6566 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a... CVE-2020-6565 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a... CVE-2020-6564 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183... CVE-2020-6563 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote... CVE-2020-6562 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83... CVE-2020-6561 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a... CVE-2020-6560 Fix available 6.5 MediumAugust 31, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote... CVE-2020-6559 Fix available 8.8 HighAugust 31, 2020
• google chrome, debian linux, opensuse backports sle +1 more +3 more Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a... CVE-2020-6558 Fix available 6.5 MediumAugust 31, 2020
• schneider-electric somove Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause... CVE-2020-7527 7.8 HighAugust 31, 2020
• apc powerchute Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x... CVE-2020-7526 8.8 HighAugust 31, 2020
• schneider-electric spacelynk firmware, wiser for knx firmware +1 more Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware... CVE-2020-7525 7.5 HighAugust 31, 2020
• schneider-electric modicon m218 firmware Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior)... CVE-2020-7524 7.5 HighAugust 31, 2020
• schneider-electric modbus serial driver, modbus driver suite +1 more Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver ... CVE-2020-7523 7.8 HighAugust 31, 2020
• schneider-electric apc easy ups online software Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability... CVE-2020-7522 9.8 CriticalAugust 31, 2020
• schneider-electric apc easy ups online software Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability... CVE-2020-7521 9.8 CriticalAugust 31, 2020
• appsaloon wp-gdpr controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS. CVE-2020-20628 6.1 MediumAugust 31, 2020
• givewp The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for... CVE-2020-20627 5.3 MediumAugust 31, 2020
• Show olderLoading…