CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- jitsi meet electronjitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal...7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability8.6 High
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...3.3 Low
qtOSS-FuzzHeap-buffer-overflow in Dasher::DasherNo score- basercmsCross Site Scripting leading to RCE in baserCMS7.6 High
- basercmsCross-Site Scripting in baserCMS7.3 High
- basercmsCross Site Scripting in baserCMS7.3 High
- ibm infosphere information serverIBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker...6.5 Medium
- chameleon mini live debugger project mini live debugger, maxieds chameleonminilivedebugger +1 morePotentially tampered sources on Play Store for Chameleon Mini Live Debugger9.3 Critical
- internationalscratchwiki mediawiki-scratch-login, scratch-wiki scratch login +1 moreAuthentication Bypass in Scratch Login (mediawiki-scratch-login)10.0 Critical
- hooskHoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an...4.3 Medium
- grafanaGrafana Arbitrary File Read6.5 Medium
- spinnaker orcaServer-Side Request Forgery in Spinnaker Orca7.5 High
- ibm spectrum protect serverIBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in...2.9 Low
- ibm spectrum protectIBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti...5.9 Medium
- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to...4.3 Medium
- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a...4.3 Medium
- neuroinformatics unit, integrative computational brain science collaboration division, riken center for brain science xoonipsCross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject...6.1 Medium
- neuroinformatics unit, integrative computational brain science collaboration division, riken center for brain science xoonipsSQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute...9.8 Critical
- nitori, nitori holdings co., ltd. app for android and nitori app for ios +1 moreNITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and...6.1 Medium
- netgear gs716tv2 firmware, gs724tv3 firmware, neuroinformatics unit, integrative computational brain science collaboration division, riken center for brain science multiple netgear switching hubs +2 moreCross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware...4.3 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the enumeration of private repository names4.3 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server8.8 High
- scalyr agentScalyr Agent 2 Missing SSL Certificate Validation9.8 Critical
- scalyr agentScalyr Agent Missing SSL Certificate Validation9.8 Critical
- trend micro deep security, trend micro, inc. micro deep security, trendmicro vulnerability protection +2 more +4 moreA vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro...7.2 High
- trend micro vulnerability protection, trendmicro deep security manager +1 moreIf LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro...8.1 High
- trend micro deep security, trend micro, inc. micro deep security, trendmicro deep security manager +1 more +3 moreIf LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro...8.1 High
- jetbrains youtrackIn JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019...6.5 Medium
- dell emc isilon, emc powerscale onefs, isilon onefs +2 moreDell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer...5.3 Medium
- openzfsOpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.7.8 High
- openzfsOpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user...7.8 High
- projectworlds travel management systemInsecure File Permissions and Arbitrary File Upload in the upload pic function in...9.8 Critical
- projectworlds house rental and property listing projectFile Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload...9.8 Critical
- online bike rental project bike rentalAn Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated...7.2 High
openvpnSUSESecurity update for openvpnNo scoreopenvpn-openssl1SUSESecurity update for openvpn-openssl1No score- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability8.6 High
- cisco nx-os, nx-os software 5.2(1) +1 moreCisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability7.5 High
- cisco nx-os, nx-os software +1 moreCisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability7.8 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability8.8 High
- cisco nx-os, nx-os software 5.0(1a) +1 moreCisco NX-OS Software Call Home Command Injection Vulnerability7.2 High
- cisco unified computing system (managed), firepower extensible operating system, nx-os +2 moreCisco UCS Manager Software Local Management CLI Denial of Service Vulnerability3.3 Low
- mercedes-benz comandOn Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles ...3.5 Low
- laborator neonLaborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.5.4 Medium
- eyesofnetworkeonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module...6.1 Medium
- ichat project ichatMichael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via...5.4 Medium
- online hotel booking system pro project hotel booking system proOnline Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer...5.4 Medium
- Show moreLoading…