CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- ibm engineering workflow management, rational rhapsody design manager +1 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm security secret serverIBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or...5.9 Medium
- ibm engineering test management, rational rhapsody design manager +1 moreIBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a...4.3 Medium
- ibm engineering test management, rational rhapsody design manager +1 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- neztore save-serverCSRF vulnerability in save-server6.7 Medium
- hmtalk daviewindyDaviewIndy Multiple Vulnerabilities7.8 High
- hmtalk daviewindyDaviewIndy Multiple Vulnerabilities7.8 High
- checkpoint zonealarm anti-ransomwareZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory...7.4 High
- cohesive vns3The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is...8.8 High
- ricoh streamline nx client tool, streamline nx pc client +1 moreAn issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that...7.8 High
- sky co., ltd. skysea client viewPrivilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an...7.8 High
- calendar01 project calendar01, calendar02 project calendar02, calendarform01 project calendarform01 +6 more +8 more[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], ...9.8 Critical
- calendar01 project calendar01, calendar02 project calendar02, php factory [calendar01] and [calendar02] +2 moreCross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and ...8.8 High
qtOSS-FuzzHeap-buffer-overflow in QPointF::xNo scorearduinojsonOSS-FuzzUse-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCopNo score- net-snmp, canonical ubuntu linux, netapp cloud backup +2 more +4 moreNet-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink)...7.8 High
- the x11 project libx11, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)...6.7 Medium
- plesk obsidianA GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated...6.1 Medium
- plesk onyxA GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users...6.1 Medium
- teltonika-networks trb245 firmwareImproper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated...7.5 High
- teltonika-networks trb245 firmwareCross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to...8.8 High
- teltonika-networks trb245 firmwareImproper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to...8.8 High
- teltonika-networks trb245 firmwareImproper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated...7.5 High
- netapp active iq unified managerActive IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension...7.8 High
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to...4.4 Medium
- tikiTiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter...6.1 Medium
- redhat amq online, enmasse +1 moreIt was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF)...5.9 Medium
- fanuc power motion i-model a firmware, series 0i-mate d firmware, series 0i-model b firmware +13 more +15 moreA vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated,...5.3 Medium
- extremenetworks extreme management centerExtreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET...6.1 Medium
- kee keepassrpcThe SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random...9.1 Critical
- kee keepassrpcThe SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a...9.1 Critical
- radare radare2, fedoraproject fedora +1 moreradare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in...5.5 Medium
- ocportalA reflected Cross-site Scripting (XSS) vulnerability exists in OcPortal 9.0.20 via the...6.1 Medium
- canonical add-apt-repositoryadd-apt-repository print ASNI terminal codes5.5 Medium
- wowza streaming engineWowza Streaming Engine through 2019-11-28 has Insecure Permissions.7.8 High
- wowza streaming engineWowza Streaming Engine through 2019-11-28 allows XSS (issue 1 of 2).5.4 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability...4.7 Medium
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on...7.8 High
- ibm i2 analyst notebook, i2 analysts notebook +1 moreIBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the...7.8 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated...7.8 High
- ibm cognos analyticsIBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack...8.2 High
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could...6.3 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules...4.6 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability...2.9 Low
- bitdefender endpoint security for mac, endpoint security +1 moreInsufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759)8.2 High
libheifOSS-FuzzHeap-buffer-overflow in x265::PicYuv::copyFromPictureNo score- Show moreLoading…