CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- f2fs-tools project f2fs-tools, fedoraproject fedora +1 moreAn exploitable code execution vulnerability exists in the file system checking functionality of...6.7 Medium
- frappe erpnextAn SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext...6.4 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site...6.1 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This...6.1 Medium
- combodo itopCombodo iTop - CSRF5.7 Medium
- combodo itopCombodo iTop - Security Misconfiguration7.5 High
- combodo itopCombodo iTop - Stored XSS6.8 Medium
- combodo itopCombodo iTop - Reflected XSS7.4 High
- combodo itopCombodo iTop - Broken Access Control7.5 High
- flatcoreflatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1...4.8 Medium
- flatcoreflatCore before 1.5.7 allows upload and execution of a .php file by an admin.7.2 High
- prometheus blackbox exporter** DISPUTED ** Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE:...5.8 Medium
- jetbrains upsourceIn JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect...7.5 High
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.6.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other...8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.4.3 Medium
- jetbrains toolboxIn JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted...7.5 High
- jetbrains kotlin, oracle banking extensibility workbench, communications cloud native core policy +2 moreIn JetBrains Kotlin before 1.4.0, there is a script-cache privilege escalation vulnerability due...8.8 High
- jetbrains youtrackJetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article...6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.5.3 Medium
- jetbrains youtrackJetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.1.1331, an external user could execute commands against...8.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.5.3 Medium
freetype2OSS-FuzzUNKNOWN READ in ft_smooth_overlap_spansNo score- digitus da-70254 firmwareDIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same...6.5 Medium
- digitus da-70254 firmwareDIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same...4.3 Medium
- digitus da-70254 firmwareDIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same...8.8 High
- digitus da-70254 firmwareDIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same...8.8 High
- lindy-international 42633 firmwareLindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same...6.5 Medium
- lindy-international 42633 firmwareLindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same...4.3 Medium
- lindy-international 42633 firmwareLindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same...8.8 High
- lindy-international 42633 firmwareLindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same...8.8 High
- avaya ip officeUnauthenticated Information Disclosure Vulnerability in IP Office5.9 Medium
- tp-link tl-ps310u firmwareTP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same...6.5 Medium
- tp-link tl-ps310u firmwareTP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same...4.3 Medium
- tp-link tl-ps310u firmwareTP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same...8.8 High
- tp-link tl-ps310u firmwareTP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same...8.8 High
- spring by vmware cloud netflix, vmware spring cloud netflix +1 moreHystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard6.5 Medium
- passmark burnintest, osforensics, performancetest +2 moreAn issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and...8.8 High
- passmark burnintest, osforensics, performancetest +2 moreAn issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and...8.8 High
- sophos xg firewall firmwareTwo OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08...8.8 High
- maharaIn Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places...6.1 Medium
- robotemi launcher osTemi Launcher OS 11969 through 13146 has Missing Authentication for a Critical Function.9.1 Critical
- robotemi robox osTemi Robox OS 117.21 through 119.24 allows Authentication Bypass via an Alternate Path or Channel.9.8 Critical
- securenvoy securmailSecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command...9.0 Critical
- Show moreLoading…