CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- gosaml2 project gosaml2Denial of Service (DoS)7.5 High
- goxmldsig project goxmldsigDenial of Service (DoS)7.5 High
- chrony, canonical ubuntu linux, fedoraproject fedora +2 moreA flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run...6.0 Medium
open62541OSS-FuzzHeap-use-after-free in UA_NodeMap_deleteNo scoreproftpd-dfsgDebianproftpd-dfsg - security updateNo score- cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 moreCloud Controller may allow developers to claim sensitive routes8.5 High
- cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 moreCF clusters with NGINX in front of them may be vulnerable to DoS7.7 High
- ui edgemax firmwareA vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web...9.8 Critical
- nextcloud desktopA cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html ...5.4 Medium
- nextcloud desktopMissing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a...6.8 Medium
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the...7.6 High
- diebold nixdorf procash 2100xe usb atm, dieboldnixdorf probase +1 moreDiebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt,...5.3 Medium
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the...7.6 High
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to...7.6 High
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the...7.1 High
- ncr aptra xfs, selfserv atm +1 moreThe currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not...5.3 Medium
- wso2 api manager, api microgateway +1 moreThe Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML...9.1 Critical
- wso2 api manager, api manager analytics, api microgateway +2 more +4 moreThe Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates....6.5 Medium
- wso2 api manager, api microgateway +1 moreThe Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML...9.1 Critical
- sierrawireless aleosALEOS SSH Service Allows Traffic Proxying8.1 High
- sierrawireless aleosALEOS Multiple Web UI vulnerabilities5.7 Medium
- sierrawireless aleosALEOS AT Command Injections3.9 Low
- sierrawireless aleosALEOS SMS Handler Buffer Overflow6.0 Medium
- sierrawireless aleosALEOS AceManager Information Disclosure9.1 Critical
- sierrawireless aleosALEOS ACEView Message Replay3.3 Low
- sierrawireless aleosALEOS LAN-Side RPC Server8.1 High
- sierrawireless aleosALEOS ACEView Service Out-Of-Bounds Read3.7 Low
- sierrawireless aleosALEOS AT Command API Abuse4.1 Medium
- sierrawireless aleosALEOS AT Command Stack Overflow6.3 Medium
- sierrawireless aleosALEOS AT API Stack Overflow6.3 Medium
- sierrawireless aleosALEOS User Root Shell Escalation7.3 High
- dolibarrDolibarr CRM allows Privilege Escalation6.5 Medium
- vmware app volumesVMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored...5.4 Medium
- instructure canvas learning management serviceServer-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to...5.8 Medium
- cogboard red discord bot, cog-creators red-discordbot +1 moreRemote Code Execution in Red Discord Bot8.5 High
- cogboard red discord bot, cog-creators red-discordbot +1 moreRemote Code Execution in Red Discord Bot8.2 High
- cookielawinfo gdpr cookie consentajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax...5.4 Medium
- sintef urxRVD#1495: Universal Robots URCaps execute with unbounded privileges6.8 Medium
- elementor website builderElementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode...6.5 Medium
- verint s5120fd firmwareThe management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint (...8.8 High
- verint 4320 firmware, 5620ptz firmware, s5120fd firmware +2 moreA hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320...7.5 High
- verint 4320 firmware, 5620ptz firmware +1 moreVerint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an...9.8 Critical
- moog exvf5c-2 firmware, exvp7c2-3 firmware +1 moreThe administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a ...9.8 Critical
- moog exvf5c-2 firmware, exvp7c2-3 firmware +1 moreMoog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This...7.5 High
- moog exvf5c-2 firmware, exvp7c2-3 firmware +1 moreSeveral XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3...9.1 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific GeoQuery can cause DoS against MongoDB Server6.5 Medium
- moog exvf5c-2 firmware, exvp7c2-3 firmware +1 moreThe Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based...9.8 Critical
- huawei fusioncomputeFusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access...6.5 Medium
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer...5.5 Medium
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of...5.5 Medium
- Show moreLoading…