CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- f5 njsnjs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in...7.8 High
- f5 njsnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in...5.5 Medium
- f5 njsnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in...5.5 Medium
- f5 njsnjs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c...5.5 Medium
- trousers project trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...7.8 High
- trousers project trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...7.8 High
- trustedcomputinggroup trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...5.5 Medium
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan...6.5 Medium
- google androidIn C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file....7.8 High
- tridium niagara, niagara enterprise security +1 moreA timeout during a TLS handshake can result in the connection failing to terminate. This can...4.3 Medium
- loway queuemetricsA SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics...8.8 High
- spirent avalanche, testcenter +1 moreAn issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware....6.7 Medium
- loway queuemetricsA SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote...8.8 High
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be...6.4 Medium
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature6.5 Medium
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive...6.5 Medium
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the...7.3 High
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the...7.3 High
- gitlabFor GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent...3.1 Low
- pega platformPega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be...9.8 Critical
- fuel cms cms, thedaylightstudio fuel cms +1 moreFUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or...9.8 Critical
- vng zalo desktopAn issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary...8.6 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute...8.1 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories...4.3 Medium
- redhat libvirt, enterprise linux +1 moreA flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the...8.8 High
xenopenSUSESecurity update for xenNo score- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +8 more +10 moreInsufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow...6.5 Medium
- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +8 more +10 moreOut-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on...4.4 Medium
- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +8 more +10 moreImproper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an...7.8 High
- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +8 more +10 moreRace condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows*...7.0 High
- intel ac 3165 firmware, ac 3168 firmware, ac 7265 firmware +73 more +75 moreInsecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8...7.8 High
- intel s2600bpbr firmware, s2600bpqr firmware, s2600bpsr firmware +5 more +7 moreImproper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP...8.2 High
- intel s2600bpbr firmware, s2600bpqr firmware, s2600bpsr firmware +5 more +7 moreImproper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and...8.2 High
- intel s2600cw2 firmware, s2600cw2r firmware, s2600cw2s firmware +20 more +22 moreUninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP,...8.2 High
- intel graphics driversImproper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version...5.5 Medium
- intel graphics driversOut of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50...5.5 Medium
- intel graphics driversUncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33...5.5 Medium
- intel graphics driversOut-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20...5.5 Medium
- mcafee data loss prevention, data loss prevention(dlp) +1 moreDLP for Mac - Unprotected Storage of Credentials5.2 Medium
- intel graphics driversRace condition in some Intel(R) Graphics Drivers before version 15.40.45.5126 may allow an...7.0 High
- intel graphics driversOut of bounds write in system driver for some Intel(R) Graphics Drivers before version 15.33.50...7.8 High
- intel graphics driversOut of bounds write for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an...7.8 High
- intel graphics driversOut of bounds read in some Intel(R) Graphics Drivers before versions 15.45.31.5127 and 15.40.45...7.8 High
- intel acceleration stackImproper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel...6.7 Medium
- intel led manager for nucImproper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may...4.4 Medium
- intel rste software raidUncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R)...7.8 High
- intel raid web console 3Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an...7.5 High
- intel inet wireless daemonImproper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may...6.5 Medium
- intel compute module hns2600bp firmware, compute module hns2600kp firmware, compute module hns2600tp firmware +15 more +17 moreBuffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute...5.5 Medium
- mcafee data loss prevention, data loss prevention(dlp) +1 moreDLP for Mac - Unprotected Storage of Credentials5.2 Medium
- Show moreLoading…