CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- ritecmsAn issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system...8.8 High
- rocket.chatRocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a...6.1 Medium
- dell encryption, encryption enterprise, endpoint security suite enterprise +2 moreDell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8...6.7 Medium
- xorux lpar2rrd, stor2rrd +1 moretz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command...9.8 Critical
- stimulsoft reportsA Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows...9.8 Critical
- tibco data virtualization, data virtualization for aws marketplace +1 moreTIBCO Data Virtualization5.3 Medium
- d-link dir-822 firmwareD-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long...9.8 Critical
- elastic elasticsearchImproper privilege management in elasticsearch6.5 Medium
- elastic enterprise searchElastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search...8.8 High
- contiki-ngBuffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions...9.8 Critical
- contiki-ngBuffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request...9.8 Critical
- contiki-ngBuffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function...9.8 Critical
- contiki-ngMemory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in...9.1 Critical
- irrelon irrelon-path, \@irrelon\/path +1 morePrototype Pollution9.8 Critical
- property-expr project property-exprPrototype Pollution9.8 Critical
- ovirt ovirt-engineA flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not...6.3 Medium
- mozwire project mozwirePath traversal in mozwire9.1 Critical
- connie-lang project connie-langPrototype Pollution9.8 Critical
fwupdSUSESecurity update for fwupdNo scorefwupdSUSESecurity update for fwupdNo score- mozilla nssA flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55....9.1 Critical
- autovance ftp-srvServer-Side Request Forgery in ftp-srv9.1 Critical
- lightbend play frameworkCSRF in Play Framework6.5 Medium
- teradici pcoip management consoleReflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an...6.1 Medium
- apache shiro, debian linux +1 moreAuthentication bypass in Apache Shiro7.5 High
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +7 more +9 moreASP.NET Core Denial of Service Vulnerability7.5 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0 +1 moreMicrosoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +7 more +9 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +27 more +29 moreWindows dnsrslvr.dll Elevation of Privilege Vulnerability7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +18 more +20 moreMicrosoft Word Information Disclosure Vulnerability8.8 High
- microsoft access, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +2 more +4 moreMicrosoft Office Click-to-Run Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft Office SharePoint XSS Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Function Discovery SSDP Provider Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +11 more +13 moreWindows Kernel Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreDirectWrite Information Disclosure Vulnerability7.8 High
- microsoft windows 10 version 1909, windows 10 version 2004, windows 10 +2 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability5.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +6 more +8 moreMicrosoft Office SharePoint XSS Vulnerability5.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +5 more +7 moreWindows Setup Elevation of Privilege Vulnerability7.3 High
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft edge, edge (edgehtml-based) +1 moreMicrosoft Edge Memory Corruption Vulnerability7.8 High
- microsoft edge, edge (edgehtml-based) +1 moreMicrosoft Edge PDF Remote Code Execution Vulnerability7.5 High
- microsoft internet explorer 11, internet explorer 9, internet explorer +2 moreMSHTML Engine Remote Code Execution Vulnerability4.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows Kernel Elevation of Privilege Vulnerability4.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +23 more +25 moreWindows Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreMicrosoft Graphics Components Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreMicrosoft Graphics Components Remote Code Execution Vulnerability8.8 High
- Show moreLoading…