CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- cellopoint celloos, cellos +1 moreCellopoint CelloOS - Remote Command Execution (RCE)7.2 High
- exceedone exmentCross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated...5.4 Medium
- exceedone exmentCross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated...5.4 Medium
- cybersolutions cybermailOpen redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect...6.1 Medium
- cybersolutions cybermailCross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to...6.1 Medium
cryptofuzzOSS-FuzzUse-of-uninitialized-value in fuzzing::memory::memory_test_msanNo scoreproftpd-dfsgDebianproftpd-dfsg - regression updateNo score- wolfsslwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within...6.8 Medium
- fedoraproject selinux-policyAn issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08...6.7 Medium
- raspapAn issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an...8.8 High
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module8.1 High
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Relative Path Traversal in enum_osx module7.1 High
- os4ed opensisopenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter...9.8 Critical
- ethz minetimeMineTime through 1.8.5 allows XSS via the notes field in a meeting invite.8.8 High
- mintegral mintegraladsdkMalicious Package7.1 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement update8.6 High
- redhat ovirt-engine, oracle virtualization +1 moreAn Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it...5.3 Medium
- codiadCodiad CSRF Vulnerability8.8 High
- codiadCodiad SSRF Vulnerability7.2 High
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks,...6.5 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be...4.4 Medium
- ibm connect:direct for unix, sterling connect:direct for unix, connect\ +1 more +3 moreIBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack...8.4 High
- ibm elastic storage serverIBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an...5.3 Medium
- ibm elastic storage serverIBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an...6.2 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could...4.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action...5.4 Medium
- ibm security rapport for macos, security trusteer rapport, security rapport +2 moreIBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user...4.4 Medium
- inogard ebiz4u, ebiz4u cviewer object axecm.dll +1 moreA vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could...8.8 High
- dbhcms project dbhcmsDBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST[...7.2 High
- dbhcms project dbhcmsDBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file']...4.9 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=...8.8 High
- dbhcms project dbhcmsDBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at...5.9 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php...8.1 High
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for ...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod...4.8 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name'...6.1 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'...6.1 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access...7.5 High
- dbhcms project dbhcmsDBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function...5.3 Medium
- gvectors wpdiscuzA Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4...10.0 Critical
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...5.0 Medium
- oasis-open oasis digital signature servicesIn OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i...7.5 High
yaraOSS-FuzzHeap-buffer-overflow in macho_is_32No scorelibzmqOSS-FuzzHeap-buffer-overflow in zmq_z85_decodeNo score- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security update6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security update6.5 Medium
- Show moreLoading…