CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA null pointer dereference vulnerability in...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.50 allows...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex...5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex...5.5 Medium
squid3Debiansquid3 - regression updateNo score- mcafee data loss prevention, dlp epo extension +1 moreDLP ePO extension - Cross site scripting4.1 Medium
- mcafee data loss prevention, dlp epo extension +1 moreDLP ePO extension - Improper Authorization4.6 Medium
- php-fusionPHP-Fusion 9.03 allows XSS on the preview page.6.1 Medium
- php-fusionPHP-Fusion 9.03 allows XSS via the error_log file.5.4 Medium
- hp elite x2 1012 g1 firmware, elite x2 1012 g2 firmware, elitebook 1030 g1 firmware +11 more +13 moreThe ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo...6.7 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.7.5 High
- themeinprogress nova litesearch.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.6.1 Medium
- cisco unified ip conference station 7937g firmware** UNSUPPORTED WHEN ASSIGNED ** A denial-of-service in Cisco Unified IP Conference Station 7937G...7.5 High
- cisco unified ip conference station 7937g firmware** UNSUPPORTED WHEN ASSIGNED ** A denial-of-service issue in Cisco Unified IP Conference Station...7.5 High
- cisco unified ip conference station 7937g firmware** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation issue in Cisco Unified IP Conference...9.8 Critical
- google asyloConfidential Information Disclosure vulnerability in Asylo2.8 Low
- google asyloArbitrary trusted memory overwrite vulnerability in Asylo6.4 Medium
- stengg vpncrypt m10 firmwareThe Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows command injection via a text field...9.8 Critical
- stengg vpncrypt m10 firmwareThe Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP...9.8 Critical
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1....5.3 Medium
- readytalk avian** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0. The vm:...5.5 Medium
- readytalk avian** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0. The vm:...7.8 High
- documalis free pdf editor, free pdf scanner +1 moreDocumalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow5.3 Medium
- palo alto networks pan-osPAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions3.0 Low
- pivotal software concourseConcourse's GitLab auth allows impersonation10.0 Critical
- articatech web proxyArtica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the...8.8 High
- articatech web proxyArtica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web...9.8 Critical
- horndis project horndisInteger overflow in HoRNDIS5.5 Medium
- eaton secure connect mobile app, secureconnect +1 moreSensitive date stored in logcat file3.8 Low
- magic asyncpg, debian linux +1 moreAsyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer9.8 Critical
- intel inet wireless daemoneapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK...8.1 High
- gitlabIn GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the...7.5 High
- gitlabIn GitLab before 13.2.3, project sharing could temporarily allow too permissive access.8.1 High
- gitlabIn GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs...5.5 Medium
- francoisjacquet rosariosis, rosariosis student information system +1 moreReflected cross-site scripting in francoisjacquet/rosariosis6.1 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreImproper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and...4.3 Medium
- sap netweaver application server java, sap se netweaver as java (engineapi), netweaver as java (j2ee-frmw) +1 more +3 moreSAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50;...7.5 High
- sap hcm travel management, sap se erp (hcm travel management) +1 moreSAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an...5.4 Medium
- sap se business objects business intelligence platform (central management console), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2,...4.8 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755,...4.3 Medium
- sap generic market data, sap se banking services (generic market data) +1 moreSAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user...8.3 High
- sap data intelligenceUnder certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0,...6.3 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740,...8.3 High
- sap adaptive server enterpriseUnder certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to...7.0 High
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreXvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on...8.5 High
- jenkins flaky test handler, jenkins project flaky test handler plugin +1 moreCSRF vulnerability in Jenkins Flaky Test Handler Plugin4.3 Medium
- Show moreLoading…