CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 morein BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12...7.5 High
- drtrust electrocardiogram pen firmwareAn issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is...6.5 Medium
- f5 big-ip asm, big-ip application security manager +1 moreIn versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration...6.1 Medium
- gnome geary, fedoraproject fedora +1 moreGNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP...5.9 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreIn versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1...8.8 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIn BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1...5.4 Medium
- niscomed m1000 multipara patient monitor firmwareAn issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory...5.3 Medium
- aedes project aedesImproper exception handling in Aedes7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12...7.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role...6.8 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents...7.5 High
- hashicorp vaultHashiCorp Vault Authentication bypass8.2 High
- hashicorp vaultAuthentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault8.2 High
- f5 big-ip asm, big-ip application security manager +1 moreIn BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12...7.5 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5...7.4 High
- umanni human resourcesUmanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may...9.8 Critical
- akamai enterprise application accessEnterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.9.8 Critical
- umanni human resourcesUmanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery,...5.3 Medium
- hms industrial networks ab ecatcherHMS Industrial Networks AB eCatcher Stack-based Buffer Overflow9.6 Critical
- haloHalo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments....5.4 Medium
- admin menu project menuWP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET...6.1 Medium
- wordpress poll project pollVinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid...7.5 High
- rss feed widget project feed widgetFahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET...6.1 Medium
- etoilewebdesign ultimate appointment booking \& schedulingEtoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower...6.1 Medium
- filemanagerpro file managermndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups...7.5 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote...8.8 High
- asus rt-ac1900p firmwareAn issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts...5.9 Medium
- asus rt-ac1900p firmwareAn issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via...6.1 Medium
- enhancesoft osticketosTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo ...5.4 Medium
- mcafee application and change control, mcafee, llc mcafee application and change control +1 moreCross Site Scripting vulnerability in ePO extension of MACC3.9 Low
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- maltegoMaltego before 4.2.12 allows XXE attacks.6.5 Medium
- expoExpo on iOS is insecure due incorrect security attribute application9.8 Critical
- php, debian linux, tenable tenable.sc +2 moreUse of freed hash key in the phar_parse_zipfile function4.8 Medium
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 High
- mozilla firefox esr, thunderbird +1 moreWhen aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...8.8 High
- mozilla firefox, firefox for android, firefox mobile +2 moreA lock was missing when accessing a data structure and importing certificate information into the...4.3 Medium
- mozilla firefox, firefox for android, firefox mobile +2 moreWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Medium
- mozilla firefoxFirefox did not reset the address bar after the beforeunload dialog was shown if the user chose...4.3 Medium
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreBy holding a reference to the eval() function from an about:blank window, a malicious webpage...6.5 Medium
- zrlogzrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other...5.7 Medium
- gradle mavenMaven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…