CVEs published in August 2020
1,282 vulnerabilities, 128 critical, 10 exploited.
- lara\'s google analytics project google analyticslara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows...5.4 Medium
- slicedinvoices sliced invoicesSliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information...7.5 High
- tp-link tl-wa855re, tl-wa855re firmware +1 moreTP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same...8.8 High
- gigadevice gd32f103 firmwareThe flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to...4.6 Medium
- linuxfoundation acrnMissing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1...7.5 High
- apexmic apm32f103 firmwareApex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a...6.8 Medium
- gigadevice gd32f103 firmware, gd32f130 firmware +1 moreGigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing...4.6 Medium
- gigadevice gd32vf103 firmwareThe flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to...4.6 Medium
- chamber dashboard business directory project dashboard business directoryThe Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.6.1 Medium
- gigadevice gd32f130 firmwareGigadevice GD32F130 devices allow physical attackers to escalate their debug interface...6.8 Medium
- forgerock identity managerDashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable...6.1 Medium
- cksic cks32f103 firmwareThe flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices...4.6 Medium
- st stm32f103 firmwareSTMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute...6.8 Medium
- gigadevice gd32f103 firmwareThe security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the...6.8 Medium
- cksic cks32f103 firmwareThe flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices...4.2 Medium
- apexmic apm32f103 firmwareThe flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical...4.6 Medium
- dolibarr erp\/crmDolibarr stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- pivotal software rabbitmq, broadcom rabbitmq server +1 moreRabbitMQ arbitrary code execution using local binary planting6.7 Medium
- espressif esp-idfThe Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 ...6.5 Medium
- espressif esp-idfThe Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier ...6.5 Medium
- ti simplelink-cc2640r2 software development kitThe Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments...8.8 High
- open-xchange appsuiteOX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.5.4 Medium
- open-xchange appsuiteOX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User...9.8 Critical
- open-xchange appsuiteOX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list...5.0 Medium
- open-xchange appsuiteOX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request...4.3 Medium
- philips dtr3502bfta dvb-t2 firmware, thomsonstb tht741fta firmware +1 moreTHOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET...7.8 High
- philips dtr3502bfta dvb-t2 firmware, thomsonstb tht741fta firmware +1 moreThe RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes...5.9 Medium
- o-dyn collabtiveAn issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when...6.1 Medium
- zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 moreAn issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,...9.8 Critical
- online book store project book storeIn projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to...9.8 Critical
- ibm spectrum scaleIBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local...6.2 Medium
- elementor website builderAn issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated...5.4 Medium
- crayon project crayonMemory safety violation in crayon8.1 High
- blubrry subscribe sidebarThe Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows...6.1 Medium
- flask-cors project flask-cors, debian linux, opensuse backports sle +1 more +3 moreFlask-Cors Directory Traversal vulnerability7.5 High
- canonical checkinstallcheckinstall 1.6.2, when used to create a package that contains a symlink, may trigger the...7.8 High
- pix-link lv-wr07 firmwareXSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers...6.1 Medium
- bitdefender endpoint security sdk, endpoint security, endpoint security tools +1 more +3 moreImproper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)8.1 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4...5.5 Medium
- mara cms project cmsMara CMS 7.5 allows contact.php?theme= XSS.6.1 Medium
- enhancesoft osticketosTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in...6.1 Medium
- joyent json, oracle commerce guided search, financial services crime and compliance management studio +2 more +4 moreCommand Injection7.2 High
- microsoft librepo, fedoraproject fedora, opensuse backports sle +1 more +3 moreA flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was...8.0 High
open62541OSS-FuzzHeap-use-after-free in UA_NodeMap_deleteNo scorelibheifOSS-FuzzHeap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspaceNo score- kleopatra project kleopatra, fedoraproject fedora, opensuse backports sle +1 more +3 moreThe Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to...8.8 High
- stiltsoft table filter and charts for confluence serverThe Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence)...8.9 High
- stiltsoft table filter and charts for confluence serverThe Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence)...7.6 High
- premidmanagers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port...5.3 Medium
- mpxj, oracle primavera unifier +1 moreImproper Restriction of XML External Entity Reference in MPXJ9.8 Critical
- Show moreLoading…