CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- jenkins yet another build visualizer, jenkins project yet another build visualizer plugin +1 moreStored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin5.4 Medium
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreCSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials6.5 Medium
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreMissing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials6.5 Medium
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreMissing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs6.5 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin SMTP password transmitted and displayed in plain text7.5 High
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsJenkins Cross-site Scripting vulnerability in project naming strategy5.4 Medium
- jenkinsJenkins Cross-Site Scripting vulnerability in help icons5.4 Medium
- sap se netweaver (knowledge management), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an...7.3 High
- sap se netweaver (knowledge management), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic...9.0 Critical
- sap se s/4 hana (fiori ui for general ledger accounting), sap s\/4 hana fiori ui for general ledger accounting +1 moreSAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform...4.3 Medium
- vbulletinvBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an...9.8 Critical
- mantisbtMantisBT XSS issue on the view_all_bug_page.php5.4 Medium
- sugarcrmSugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.5.3 Medium
- sugarcrmSugarCRM before 10.1.0 (Q3 2020) allows XSS.5.4 Medium
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreAn information disclosure and remote code execution vulnerability in the slinger web server of...10.0 Critical
xenopenSUSESecurity update for xenNo score- android play core library, google llc android play core +1 moreLocal arbitrary code execution in splitinstall in Android's Play Core8.8 High
cryptofuzzOSS-FuzzUse-of-uninitialized-value in fuzzing::memory::memory_test_msanNo scoreuwebsocketsOSS-FuzzUse-of-uninitialized-value in slide_hashNo scoreuwebsocketsOSS-FuzzUse-of-uninitialized-value in longest_matchNo scorelibavifOSS-FuzzUNKNOWN WRITE in avifDecoderDataFillImageGridNo scorelinux-latest-4.19Debianlinux-latest-4.19 - new packageNo score- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service...7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth...7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote...7.5 High
- avaya aura communication manager, aura messaging +1 moreAvaya Product System Management Interface Cross-Site Request Forgery Vulnerability6.4 Medium
- django-celery-results project django-celery-resultsdjango-celery-results Stores Sensitive Information In Cleartext7.5 High
- gnome gnome-shell, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When...4.3 Medium
- radare radare2, fedoraproject fedora +1 moreradare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in...7.5 High
@progress/kendo-angular-editornpmCross-Site Scripting in @progress/kendo-angular-editorNo score- tibco silver fabricTIBCO Silver Fabric XSS vulerability6.8 Medium
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreIn-band key negotiation issue in AWS S3 Crypto SDK for GoLang2.5 Low
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreCBC padding oracle in AWS S3 Crypto SDK for GoLang5.6 Medium
- robotemi temiThe Temi application 1.3.3 through 1.3.7931 for Android has hard-coded credentials.7.5 High
- huawei honor 20 firmware, honor 20 pro firmware, honor magic 2 firmware +7 more +9 moreHUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions...6.8 Medium
- google go-tpm, google llc google/go-tpm library +1 moreTPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper6.3 Medium
- pactwareIn PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format,...5.5 Medium
- pactwareIn PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner,...7.1 High
- apache wicket, fortress +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Wicket7.5 High
- teradici graphics agent, pcoip standard agent +1 moreBroker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for...5.5 Medium
- evga precision x1, winring0 project winring0 +1 moreThe WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows…7.8 High
- teradici graphics agent, pcoip standard agent +1 moreA function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior...6.7 Medium
- teradici graphics agent, pcoip standard agent +1 moreThe support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows...7.8 High
- teradici cloud access connector, cloud access connector legacy +1 moreThe Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy...6.1 Medium
- teradici cloud access connector, cloud access connector legacy +1 moreThe Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy...7.5 High
- teradici pcoip management consoleThe web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set...6.1 Medium
- getsymphony symphonycontent/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to...6.1 Medium
- turcom trcwifizoneTurcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php...9.8 Critical
- telegram desktopTelegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type...7.8 High
- Show moreLoading…