CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- jeedomJeedom through 4.0.38 allows XSS.6.1 Medium
- nlnetlabs routinatorAn issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers...7.4 High
- quadra-informatique atos\/sipsThe ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command...8.8 High
- mcafee total protection (mtp), total protection, mcafee,llc mcafee total protection (mtp) +2 moreTotal Protection (MTP) - Unexpected behavior violation7.5 High
- suluReset Password / Login vulnerability in Sulu5.3 Medium
- projectcontour contourDenial of service in Contour7.5 High
drupal/groupPackagistThe Group module enables you to hand out permissions on a smaller subset, section or community of your website. Under very specific circumstances, where two group types support the same content, yet h…No score- chartkick project chartkickCSS Injection in Chartkick gem6.1 Medium
- etcd, fedoraproject fedora +1 moreImproper Preservation of Permissions in etcd5.7 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcd6.5 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcd6.5 Medium
drupal/groupPackagistThe Group module enables you to hand out permissions on a smaller subset, section or community of your website. With the 1.1 security release, new code was introduced to ensure proper access for all e…No score- limesurveyLimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks...6.1 Medium
- usvn user-friendly svnUSVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.6.1 Medium
- trend micro anti-threat toolkit (attk), apex one, deep security +15 more +17 moreAn input validation vulnerability found in multiple Trend Micro products utilizing a particular...6.7 Medium
- pghero project pgheroPgHero gem allows CSRF8.1 High
- field test project testField Test CSRF vulnerability4.3 Medium
- extremenetworks extreme management centerExtreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET...6.1 Medium
- apache skywalkingSQL Injection in Apache SkyWalking9.8 Critical
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML...8.2 High
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote...3.7 Low
- yokogawa electric corporation cams for his, yokogawa b\/m9000cs firmware, b\/m9000vp firmware +2 more +4 moreCAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP ...9.8 Critical
- yokogawa electric corporation cams for his, yokogawa b\/m9000cs firmware, b\/m9000vp firmware +2 more +4 moreDirectory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small)...9.8 Critical
- canonical ubuntu linux, debian linux, the xorg project xorg-x11-server +1 more +3 moreA flaw was found in the way xserver memory was not properly initialized. This could leak parts of...5.5 Medium
- lilypond, debian linux, fedoraproject fedora +2 more +4 morescm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when ...9.8 Critical
- aerospike serverAerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user...9.8 Critical
mysql-8.0Ubuntumysql-8.0 regressionNo score- atlassian fisheyeAffected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a...6.5 Medium
- mozilla firefox, firefox for android, firefox mobile +2 moreWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 Medium
- mozilla firefox, firefox for android, firefox mobile +2 moreDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Medium
- mozilla firefox, firefox for android, firefox mobile +2 moreWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 Medium
grub2Ubuntu,grub2-signedUbuntu +1 moregrub2, grub2-signed regressionNo score- nebulab solidusAbility to change order address without triggering address validations in solidus5.3 Medium
- extremenetworks extreme management centerExtreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected...6.1 Medium
- amazon firecrackerIn Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under...5.9 Medium
- gantt-chart project gantt-chartAn issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing...8.1 High
- softperfect ram diskAn exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys...8.8 High
- acti nvrActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated...7.5 High
- gantt-chart project gantt-chartAn issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing...5.4 Medium
- softperfect ram diskAn exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve...3.8 Low
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack...7.8 High
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of...3.3 Low
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized...7.8 High
- swisscom internet-box 2 firmware, internet-box 3 firmware, internet-box light firmware +2 more +4 moreAn issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus...8.0 High
- ubuntu libvirt, canonical ubuntu linux +1 moreLibvirt Service Arbitrary File Write Privilege Escalation Vulnerability9.3 Critical
- canonical ppppppd arbitrary file read information disclosure vulnerability5.5 Medium
- canonical apport, ubuntu linux +1 moreTOCTOU in apport7.0 High
- canonical apportgdbus setgid privilege escalation3.1 Low
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on...5.1 Medium
- ibm engineering requirements management doors next, rational rhapsody design manager +1 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…