CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 Low
- soplanningSOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment,...5.4 Medium
- sabnzbdSABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operati…8.8 High
- zohocorp manageengine adselfservice plusAn elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build...9.8 Critical
- tiny tinymceCross-site scripting vulnerability in TinyMCE6.1 Medium
datasettePyPICSRF tokens leaked in URL by canned query form4.3 Medium- project quay quayAn information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This...4.3 Medium
- [unknown] cloudforms, redhat cloudforms management engine +1 moreRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update6.3 Medium
- [unknown] cloudforms, redhat cloudforms management engine +1 moreRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update9.1 Critical
- [unknown] cloudforms, redhat cloudforms management engine +1 moreRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update7.1 High
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update9.1 Critical
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update6.5 Medium
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update8.3 High
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update6.0 Medium
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update5.4 Medium
- ibm qradar wincollect, qradar security information and event manager +1 moreIBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary...8.1 High
- ibm qradar wincollect, qradar security information and event manager +1 moreIBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect...6.5 Medium
- huawei fusionsphere openstackFusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product...8.8 High
cryptofuzzOSS-FuzzUse-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecryptNo scorefirmware-nonfreeDebianfirmware-nonfree - new upstream versionNo score- roundcube webmail, fedoraproject fedora +1 moreRoundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a...6.1 Medium
- carson-saint saint security suiteA cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security Suite 8...6.1 Medium
- carson-saint saint security suiteAn SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8...8.8 High
- carson-saint saint security suiteAn SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20...8.8 High
- carson-saint saint security suiteA cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT Security...6.1 Medium
- mybbXSS in MyBB8.8 High
- huawei p30 firmware, p30 pro firmware +1 moreHUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions...5.5 Medium
- json pattern validator project pattern validatorValidation bypass in jpv9.8 Critical
- huawei fusioncomputeFusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated...7.8 High
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service...5.5 Medium
- mozilla firefox, firefox for ios +1 moreA unicode RTL order character in the downloaded file name can be used to change the file's name...4.3 Medium
- mozilla firefox esrGiven an installed malicious file picker application, an attacker was able to overwrite local...5.5 Medium
- mozilla firefox esrGiven an installed malicious file picker application, an attacker was able to steal and upload...5.5 Medium
- mozilla firefox, thunderbird +1 moreUsing object or embed tags, it was possible to frame other websites, even if they disallowed...6.5 Medium
- mozilla firefox, firefox for +1 moreA Content Provider in Firefox for Android allowed local files accessible by the browser to be...7.4 High
- mozilla firefox for ios, firefox mobile +1 moreA rogue webpage could override the injected WKUserScript used by the download feature, this...6.5 Medium
- mozilla firefox for ios, firefox mobile +1 moreA rogue webpage could override the injected WKUserScript used by the logins autofill, this...6.5 Medium
- p5-crypt-perl project p5-crypt-perlECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against...7.5 High
- mibew messengerMibew Messenger before 3.2.7 allows XSS via a crafted user name.6.1 Medium
- hichip shenzhen hichip vision technology firmwareFirmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many...9.8 Critical
- hichip shenzhen hichip vision technology firmwareFirmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many...7.5 High
- hichip shenzhen hichip vision technology firmwareFirmware developed by Shenzhen Hichip Vision Technology (V6 through V20, after 2018-08-09 through...9.8 Critical
- cs2-network p2pCS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an...5.9 Medium
- cs2-network p2pCS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an...8.1 High
- nextcloud desktopA code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a...7.8 High
- nextcloud desktopA memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS...5.5 Medium
- gitlabIn GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which...9.6 Critical
- gitlab runnerFor GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server,...5.4 Medium
- gitlabIn GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked...4.2 Medium
- gitlabIn GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override...6.3 Medium
- Show moreLoading…