CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- designmasterevents conference management cmsDesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'6.1 Medium
- 13enforme cms13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter.6.1 Medium
- 13enforme cms13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter.9.8 Critical
- soluzioneglobale ecommerce cmsSQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"9.8 Critical
- kandnconcepts club cms project club cmsKandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php...6.1 Medium
- webexcels ecommerce cmsWebexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id...9.8 Critical
- webexcels ecommerce cmsWebexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php'...6.1 Medium
- create-project manager project managerCreate-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via...5.4 Medium
- kandnconcepts club cms project club cmsKandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id...9.8 Critical
- gmapfpIn Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function...7.5 High
- designmasterevents conference managementDesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the...9.8 Critical
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher...3.3 Low
- ibm websphere application server nd, websphere virtual enterprise, websphere application server +2 moreIBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0...4.7 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may...3.7 Low
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by...4.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or...6.5 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm websphere mqIBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user...7.5 High
- ibm rational changeIBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of...6.1 Medium
cell-projectcrates.io`cell-project` used incorrect variance when projecting through `&Cell<T>`No scoresquid3Ubuntusquid3 regressionNo scoreopenthreadOSS-FuzzMemcpy-param-overlap in ot::Message::WriteNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlTextReaderReadNo scorepopplerOSS-FuzzNegative-size-param in BaseMemStream<char const>::getCharsNo score- wso2 api manager, api manager analytics, identity server +3 more +5 moreAn issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This...6.1 Medium
- wso2 api manager, api manager analytics, identity server +3 more +5 moreAn issue was discovered in certain WSO2 products. A valid Carbon Management Console session...8.8 High
- wso2 api manager, api manager analytics, api microgateway +6 more +8 moreAn issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This...6.1 Medium
- wso2 api manager, api manager analytics, api microgateway +6 more +8 moreAn issue was discovered in certain WSO2 products. A valid Carbon Management Console session...8.8 High
- oracle suitecommerce advanced, oracle corporation netsuite service +1 moreVulnerability in SuiteCommerce Advanced (SCA) Sites component of Oracle NetSuite service....5.4 Medium
- oracle suitecommerce advanced, oracle corporation netsuite service +1 moreVulnerability in the SuiteCommerce Advanced (SCA) component of Oracle NetSuite service. Supported...5.4 Medium
- arubanetworks 2530 firmware, 2540 firmware, 2920 firmware +3 more +5 moreAruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with...8.8 High
- arubanetworks 2530 firmware, 2540 firmware, 2920 firmware +3 more +5 moreAruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows...6.1 Medium
- ibm rational asset managerIBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An...4.3 Medium
floodnpmServer secret was included in static assets and served to clientsNo score- ibm guardium data encryption, security guardium data encryption +1 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which...4.0 Medium
- niscomed m1000 multipara patient monitor firmwareAn issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory...5.5 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker...8.8 High
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that...5.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes...2.7 Low
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have...7.4 High
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear...5.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a...6.8 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear...6.0 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to...5.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…