CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- prismjs previewers, prism +1 moreCross-Site Scripting in Prism7.1 High
- microfocus secure messaging gatewayDKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting...8.8 High
- apache http serverIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 High
- handysoft hslogin2.dllHandySoft ActiveX File Download and Execution Vulnerability8.8 High
- robotemi temi firmwareTemi firmware 20190419.165201 does not properly verify that the source of data or communication...6.5 Medium
xenSUSESecurity update for xenNo score- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues6.1 Medium
- opensuse leap, leap 15.1, leap 15.2 +3 more +5 moreinn: non-root owned files8.4 High
pcapplusplusOSS-FuzzUNKNOWN WRITE in count_blocksNo score- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited...7.8 High
- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited...7.8 High
- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. A stack-based buffer overflow may be...7.8 High
- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. A heap-based buffer overflow may be exploited...7.8 High
- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds read may be exploited by...7.8 High
- etcd-io etcd, fedoraproject fedora +1 moreImproper authentication in etcd6.5 Medium
- etcd-io etcd, fedoraproject fedora +1 moreDenial of Service in etcd7.7 High
- etcd-io etcd, fedoraproject fedora +1 moreNo minimum password length in etcd5.8 Medium
- ivanti dsm netinstUnsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption...9.8 Critical
- ivanti service manager heat remote control, desktop\&server management +1 moreDenial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer...9.8 Critical
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...7.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer...7.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read...5.5 Medium
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...7.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...7.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused...7.8 High
xenSUSESecurity update for xenNo scorexenSUSESecurity update for xenNo scorexenSUSESecurity update for xenNo score- golang go, debian linux, fedoraproject fedora +1 more +3 moreWithdrawn Advisory: Infinite loop in xz7.5 High
- activesoft mybrowserplus, raonwiz k upload +1 moreMyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf)....5.5 Medium
- zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreCertain Zyxel products have a locally accessible binary that allows a non-root user to generate a...8.4 High
- zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreA backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects...6.5 Medium
- freebsdIn FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4...6.8 Medium
- freebsdIn FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4...7.0 High
- easycorp zentao proZenTao Pro Command Injection9.6 Critical
- cayin technology cms, cms-20, cms-40 +7 more +9 moreCayin CMS Command Injection9.6 Critical
- cayin technology xpostCayin xPost SQL Injection10.0 Critical
- gog galaxy, galaxyclientservice +1 moreGOG Galaxy GalaxyClientService Privilege Escalation8.4 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...8.8 High
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output...9.8 Critical
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,...7.8 High
polaris-websitenpmCSRF Vulnerability in polaris-website6.8 Medium- Show moreLoading…