CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- cisco anyconnect secure, anyconnect secure mobility client +1 moreCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability7.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability5.5 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability5.5 Medium
- cisco email security appliance (esa), content security management appliance, email security appliance +2 moreCisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability5.5 Medium
- cisco cyber vision, cyber vision center +1 moreCisco Cyber Vision Center Software Access Control Bypass Vulnerability5.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Additional Paths Denial of Service Vulnerability4.3 Medium
- cisco webex meetings, webex meetings online +1 moreCisco Webex Meetings Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco ucs directorCisco UCS Director Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco webex meetings, webex meetings online +1 moreCisco Webex Meetings User Email Address Information Disclosure Vulnerability5.0 Medium
- cisco staros, asr 5000 series software +1 moreCisco StarOS IPv6 Denial of Service Vulnerability6.8 Medium
- cisco webex meetings, webex meetings server +1 moreCisco Webex Meetings Desktop App Information Disclosure Vulnerabilities4.1 Medium
- cisco webex meetings, webex meetings server +1 moreCisco Webex Meetings Desktop App Information Disclosure Vulnerabilities4.1 Medium
- linux-cmdline project linux-cmdlinePrototype Pollution9.8 Critical
- lualdebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped...7.5 High
- lualgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a...5.3 Medium
- luajitLuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.7.5 High
- online shopping alphaware project shopping alphawareA SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote...9.8 Critical
- shopxoShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to...8.8 High
- noviflow noviwareThe novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed...8.8 High
- ui edgeswitch firmware, opensuse backports sle, leap +2 moreA command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an...8.8 High
- ui edgeswitch firmwareAn information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed...6.5 Medium
- citrix xenmobile serverImproper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10...9.8 Critical
- citrix xenmobile serverImproper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10...9.8 Critical
- citrix xenmobile serverInsufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile...7.5 High
- phpbbphpBB Server-Side Request Forgery Vulnerability5.8 Medium
- citrix xenmobile serverImproper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10...7.5 High
- nextcloud desktopA memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR...5.5 Medium
- citrix xenmobile serverImproper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10...6.1 Medium
- huawei taurus-al00b, taurus-al00b firmware +1 moreHuawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user...6.7 Medium
- huawei fusioncomputeFusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit...9.1 Critical
- huawei e6878-370, e6878-370 firmware +1 moreHuawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have...7.0 High
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a...4.6 Medium
- huawei fusioncomputeFusionCompute 8.0.0 have a command injection vulnerability. The software does not sufficiently...8.8 High
- nis-utils project nis-utilsPrototype Pollution9.8 Critical
- templ8 project templ8Prototype Pollution9.8 Critical
- dbsoft sglacAn issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in...9.8 Critical
- ibm spectrum virtualize, flashsystem v5000 firmware, flashsystem v7200 firmware +9 more +11 moreIBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their...6.8 Medium
- apache solrImproper Input Validation in Apache Solr8.8 High
- lua, debian linux, fedoraproject fedora +2 moreldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal,...5.3 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Outlook Information Disclosure Vulnerability5.5 Medium
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreUntrusted Search Path in PostgreSQL7.3 High
- postgresql, opensuse leap +1 moreIt was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly...7.1 High
- expresstech quiz and survey masterphp/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress...6.5 Medium
mumbleMageiaUpdated mumble packages fix security vulnerabilityNo score- snmptt, debian linux +1 moreSNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.9.8 Critical
libxml2OSS-FuzzHeap-use-after-free in xmlXIncludeIncludeNodeNo score- zkteco zkbiosecurity server, facedepot 7b firmware +1 moreA token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0...9.8 Critical
- megvii koala firmwareLack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to...7.5 High
- zkteco zkbiosecurity server, facedepot 7b firmware +1 moreLack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0...5.9 Medium
- textpatternIn Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.5.3 Medium
- Show moreLoading…