CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- textpatternIn Textpattern 4.5.7, an unprivileged author can change an article's markup setting.5.3 Medium
- nim-lang nimIn Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For...7.5 High
- nim-lang nimSecurity update for nim6.5 Medium
- nim-lang nimSecurity update for nim9.8 Critical
- zoom sharing serviceA vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would...7.8 High
- adobe git-server, helix +1 moreGHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath function5.9 Medium
- getcomposer composer-setup, composer windows-setup +1 moreLocal privilege elevation in Composer-Setup for Windows6.7 Medium
- openapi-python-client project openapi-python-clientPath Traversal in openapi-python-client3.0 Low
- openapi-python-client project openapi-python-clientArbitrary Code Generation8.0 High
- rapidscada rapid scadaRapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in...7.8 High
- pnotes.net project pnotes.netA File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...7.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...8.8 High
- fortinet fortiosA Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the...6.5 Medium
- siemens automation license manager 5, automation license manager 6, automation license manager +2 moreA vulnerability has been identified in Automation License Manager 5 (All versions), Automation...7.8 High
- siemens ag sicam web firmware for sicam a8000 rtus, siemens sicam a8000 firmware +1 moreA vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions <...9.6 Critical
- siemens desigo cc, desigo cc compact, desigo consumption control +1 more +3 moreA vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4...9.8 Critical
- springtree madlib-object-utilsPrototype Pollution9.8 Critical
- php.js project php.jsPrototype Pollution9.8 Critical
- huawei fusioncomputeFusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection...4.4 Medium
- huawei fusioncomputeFusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection...7.5 High
- cmsmadesimple cms made simpleCMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does...7.8 High
- ise smart connect knx vaillantise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.7.5 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam efd-2240 firmware +8 more +10 moreUsing a specially crafted URL command, a remote authenticated user can execute commands as root...7.2 High
- graphpaperpress sell mediaA Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4...6.1 Medium
- galileo cms project cmsThere is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users...6.1 Medium
- ibm event streamsIBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to...6.5 Medium
libyamlOSS-FuzzHeap-buffer-overflow in yaml_emitter_emit_flow_mapping_keyNo scoreopenexrOSS-FuzzSegv on unknown address in Imf_2_5::hufUncompressNo scoreutil-linuxOSS-FuzzHeap-buffer-overflow in fdisk_partnameNo scoreharfbuzzOSS-FuzzUNKNOWN READ in hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_haveNo score- qemu, debian linux +1 moreA heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation...6.3 Medium
- abbyy finereaderABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows...7.8 High
- philips smartcontrolPhilips SmartControl DLL Hijacking7.4 High
- lua, fedoraproject fedora +1 moreLua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection...7.8 High
- artifex mujsArtifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in...7.8 High
- jerryscriptJerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.7.1 High
- jerryscript** DISPUTED ** JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy...7.8 High
- Show moreLoading…