CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- wolfsslAn issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local...7.0 High
- huawei p30, p30 firmware +1 moreHUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than...4.3 Medium
- wolfsslAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS)...7.5 High
- wolfsslAn issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS...5.3 Medium
- vmware esxi, vcenter server, cloud foundation +2 moreVMware ESXi and vCenter Server contain a partial denial of service vulnerability in their...5.3 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted...7.1 High
- philips suresigns vs4, suresigns vs4 firmware +1 morePhilips SureSigns VS4 Improper Authentication4.9 Medium
- philips suresigns vs4, suresigns vs4 firmware +1 morePhilips SureSigns VS4 Improper Access Control6.3 Medium
- philips suresigns vs4, suresigns vs4 firmware +1 morePhilips SureSigns VS4 Improper Input Validation2.1 Low
- philips dreammapperPhilips DreamMapper Insertion of Sensitive Information into Log File5.3 Medium
- safe-eval project safe-evalSandbox Escape8.1 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) trial +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer6.9 Medium
- zulip serverZulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.6.1 Medium
- zulip serverZulip Server before 2.1.5 allows reverse tabnapping via a topic header link.5.4 Medium
- zulip serverZulip Server before 2.1.5 has Incorrect Access Control because...7.5 High
- zulip serverZulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write...8.8 High
- gog galaxyThe client (aka GalaxyClientService.exe) in GOG GALAXY 2.0.19 allows local privilege escalation...7.8 High
- nexusdbNexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.7.5 High
- voidtools everything** DISPUTED ** voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege...7.8 High
uwebsocketsOSS-FuzzUse-of-uninitialized-value in us_internal_dispatch_ready_pollNo score- thalesgroup bgs5 firmware, ehs5 firmware, ehs6 firmware +6 more +8 moreSome devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by...6.2 Medium
- emclient em clienteM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently...4.8 Medium
- freron mailmateMailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced...5.9 Medium
- hashicorp vault-ssh-helperImproper Input Validation in vault-ssh-helper7.5 High
- ibm content navigatorIBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of...4.3 Medium
- ibm content navigatorIBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious...4.3 Medium
- rangee rangeeosIn the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the...8.8 High
- rangee rangeeosThe Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to...7.8 High
- rangee rangeeosMultiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials...5.5 Medium
- rangee rangeeosThe Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to...9.8 Critical
- kabir-m-alhasan student management systemKabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username:...9.8 Critical
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via ...9.8 Critical
- treasuryxpressAn XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and...6.1 Medium
- treasuryxpressAn XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and...6.1 Medium
- treasuryxpressIn TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI...6.5 Medium
- alpm-rs project alpm-rsDouble free in alpm-rs9.8 Critical
- dronecode micro air vehicle link, px4 mavlink +1 moreRVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication8.1 High
- open robotics ros, openrobotics robot operating system +1 moreRVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:1328.0 High
- isc bind, canonical ubuntu linux, debian linux +4 more +6 moreupdate-policy rules of type "subdomain" are enforced incorrectly4.3 Medium
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failure6.5 Medium
- isc bind, canonical ubuntu linux, isc bind9 +3 more +5 moreAttempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c7.5 High
- isc bind, canonical ubuntu linux, isc bind9 +2 more +4 moreIn BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with...7.5 High
- auth0 lockDOM-based XSS in auth0-lock6.4 Medium
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bec technologies multiple routers, netgear r6700 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.1 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- Show moreLoading…