Vulnerability Summary for the Week of August 31, 2020CISA All NCAS Products

Original release date: September 7, 2020

High Vulnerabilities

Primary
Vendor — Product
Description
Published
CVSS Score
Source & Patch Info

arr-flatten-unflatten_project — arr-flatten-unflatten
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
2020-09-01
7.5
CVE-2020-7713
CONFIRM

canonical — checkinstall
checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file.
2020-08-31
7.2
CVE-2020-25031
MISC

cisco — ios_xr
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address this vulnerability.
2020-08-29
7.8
CVE-2020-3566
CISCO

deep-get-set_project — deep-get-set
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
2020-09-01
7.5
CVE-2020-7715
MISC

digitalbazzar — forge
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
2020-09-01
7.5
CVE-2020-7720
CONFIRM
MISC
MISC

dot-notes_project — dot-notes
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
2020-09-01
7.5
CVE-2020-7717
MISC

gammautils_project — gammautils
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
2020-09-01
7.5
CVE-2020-7718
MISC

gedi_project — gedi
All versions of package gedi are vulnerable to Prototype Pollution via the set function.
2020-09-01
7.5
CVE-2020-7727
MISC

google — android
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged SecureFolder process) to bypass admin restrictions in KnoxContainer. The Samsung ID is SVE-2020-18133 (August 2020).
2020-08-31
7.5
CVE-2020-25055
MISC

google — android
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung ID is SVE-2020-17797 (August 2020).
2020-08-31
7.5
CVE-2020-25049
MISC

google — android
An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or cause a denial of service (memory corruption) because indexes are mishandled. The Samsung ID is SVE-2020-17426 (August 2020).
2020-08-31
7.5
CVE-2020-25052
MISC

google — android
An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 (August 2020).
2020-08-31
7.5
CVE-2020-25053
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020).
2020-08-31
7.5
CVE-2020-25062
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011 (July 2020).
2020-08-31
7.5
CVE-2020-25057
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020).
2020-08-31
7.5
CVE-2020-25061
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020).
2020-08-31
7.8
CVE-2020-25065
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020).
2020-08-31
7.5
CVE-2020-25058
MISC

guidesmiths — worksmith
All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.
2020-09-01
7.5
CVE-2020-7725
MISC

heybbs_project — heybbs
Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
2020-09-03
7.5
CVE-2020-25005
MISC
MISC

heybbs_project — heybbs
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.
2020-09-03
7.5
CVE-2020-25006
MISC
MISC

heybbs_project — heybbs
Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
2020-09-03
7.5
CVE-2020-25004
MISC
MISC

invertase — deeps
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
2020-09-01
7.5
CVE-2020-7716
MISC

locutus_project — locutus
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
2020-09-01
7.5
CVE-2020-7719
CONFIRM
MISC

mpxj — mpxj
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.
2020-08-29
7.5
CVE-2020-25020
MISC

node-oojs_project — node-oojs
All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
2020-09-01
7.5
CVE-2020-7721
MISC

nodee-utils_project — nodee-utils
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
2020-09-01
7.5
CVE-2020-7722
MISC

os4ed — opensis
An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6141
MISC

os4ed — opensis
SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6138
MISC

os4ed — opensis
SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6137
MISC

os4ed — opensis
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6144
MISC

os4ed — opensis
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6143
MISC

os4ed — opensis
A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6142
MISC

os4ed — opensis
SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
2020-09-01
7.5
CVE-2020-6139
MISC

qemu — qemu
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice ‘setup_len’ exceeds its ‘data_buf[4096]’ in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.
2020-08-31
7.2
CVE-2020-14364
MISC
MISC
MISC

realseriousgames — confucious
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
2020-09-01
7.5
CVE-2020-7714
MISC

redlion — n-tron_702-w_firmware
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
2020-09-01
10
CVE-2020-16204
MISC
FULLDISC
MISC

riken — xoonips
SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
2020-08-28
7.5
CVE-2020-5624
MISC
MISC
MISC

rpm — librepro
A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.
2020-08-30
8.5
CVE-2020-14352
MISC
MISC

safe-object2_project — safe-object2
All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.
2020-09-01
7.5
CVE-2020-7726
MISC

schneider-electric — apc_easy_ups_online_software
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists in SFAPV9601 – APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet` which may lead to uploading executable files to non-specified directories.
2020-08-31
7.5
CVE-2020-7521
MISC

schneider-electric — apc_easy_ups_online_software
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists in SFAPV9601 – APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServlet` which may lead to uploading executable files to non-specified directories.
2020-08-31
7.5
CVE-2020-7522
MISC

tiny-conf_project — tiny-conf
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
2020-09-01
7.5
CVE-2020-7724
MISC

usvn — usvn
USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.
2020-09-01
7.5
CVE-2020-25069
MISC

yola — promisehelpers
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
2020-09-01
7.5
CVE-2020-7723
MISC

Medium Vulnerabilities

Primary
Vendor — Product
Description
Published
CVSS Score
Source & Patch Info

apc — powerchute
Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.
2020-08-31
6.5
CVE-2020-7526
MISC

appsaloon — wp-gdpr
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
2020-08-31
4.3
CVE-2020-20628
MISC

basercms — basercms
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and UploaderFilesController.php. This is fixed in version 4.3.7.
2020-08-28
4.6
CVE-2020-15159
MISC
MISC
CONFIRM

bitdefender — endpoint_security
An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product’s security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.
2020-08-30
4.6
CVE-2020-8097
MISC

blubrry — subscribe_sidebar
The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS.
2020-08-31
4.3
CVE-2020-25033
MISC
MISC

bufferlist_project — bufferlist
A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1 and <2.2.1 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.
2020-08-30
5.5
CVE-2020-8244
MISC

chamber_dashboard_business_directory_project — chamber_dashboard_business_directory
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.
2020-08-31
4.3
CVE-2020-24699
MISC
MISC

chameleon_mini_live_debugger_project — chameleon_mini_live_debugger
Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it’s sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.
2020-08-28
6.4
CVE-2020-15165
CONFIRM
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php.
2020-09-03
4.3
CVE-2020-25087
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php.
2020-09-03
4.3
CVE-2020-25090
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php.
2020-09-03
4.3
CVE-2020-25089
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in _parts/header.php, within application/views/templates/clothesshop, application/views/templates/greenlabel, and application/views/templates/redlabel.
2020-09-03
4.3
CVE-2020-25092
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.
2020-09-03
4.3
CVE-2020-25091
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application/views/templates/clothesshop, application/views/templates/onepage, and application/views/templates/redlabel.
2020-09-03
4.3
CVE-2020-25093
MISC

ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php.
2020-09-03
4.3
CVE-2020-25088
MISC

flask-cors_project — flask-cors
An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.
2020-08-31
5
CVE-2020-25032
MISC

forgerock — identity_manager
Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6.
2020-08-31
4.3
CVE-2020-17465
MISC
MISC

get-simple — getsimple_cms
A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client’s browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.
2020-09-01
4.3
CVE-2020-23839
MISC

gigadevice — gd32f103_firmware
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface.
2020-08-31
4.6
CVE-2020-13465
MISC

gigadevice — gd32f130_firmware
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection).
2020-08-31
4.6
CVE-2020-13468
MISC

golang — go
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
2020-09-02
4.3
CVE-2020-24553
MISC
FULLDISC
MISC

google — android
An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chipset is mishandled. The Samsung ID is SVE-2020-16169 (August 2020).
2020-08-31
5
CVE-2020-25056
MISC

google — android
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppInfo. The Samsung ID is SVE-2020-17758 (August 2020).
2020-08-31
5
CVE-2020-25051
MISC

google — android
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (August 2020).
2020-08-31
5
CVE-2020-25050
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can occur because of incorrect application-level input validation. The LG ID is LVE-SMP-200018 (July 2020).
2020-08-31
5
CVE-2020-25063
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020).
2020-08-31
5
CVE-2020-25059
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020).
2020-08-31
5
CVE-2020-25064
MISC

google — android
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020).
2020-08-31
4.6
CVE-2020-25060
MISC

grafana — grafana
Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.
2020-08-28
4
CVE-2019-19499
MISC

hoosk — hoosk
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user’s intention.
2020-08-28
4.3
CVE-2020-16610
MISC
CONFIRM

ibm — infosphere_guardium
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282.
2020-09-01
6.5
CVE-2012-3336
CONFIRM
XF

ibm — infosphere_guardium
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
2020-09-01
4
CVE-2012-3340
CONFIRM
XF

ibm — infosphere_guardium
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.
2020-09-01
5
CVE-2012-3337
CONFIRM
XF

ibm — infosphere_guardium
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286.
2020-09-01
5
CVE-2012-3338
CONFIRM
XF

ibm — resilient_security_orchestration_automation_and_response
IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.
2020-08-28
4
CVE-2019-4533
XF
CONFIRM

ibm — resilient_security_orchestration_automation_and_response
IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236.
2020-08-28
4
CVE-2019-4579
XF
CONFIRM

ibm — spectrum_protect
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613.
2020-08-28
5
CVE-2020-4559
XF
CONFIRM

jenkins — database
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.
2020-09-01
6.8
CVE-2020-2241
MLIST
CONFIRM

jenkins — database
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.
2020-09-01
6.8
CVE-2020-2240
MLIST
CONFIRM

jenkins — database
A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.
2020-09-01
4
CVE-2020-2242
MLIST
CONFIRM

jenkins — jenkins
Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
2020-09-01
4
CVE-2020-2251
MLIST
CONFIRM

jenkins — jsgames
Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.
2020-09-01
4.3
CVE-2020-2248
MLIST
CONFIRM

jenkins — klocwork_analysis
Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
2020-09-01
4
CVE-2020-2247
MLIST
CONFIRM

jenkins — parameterized_remote_trigger
Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
2020-09-01
4
CVE-2020-2239
MLIST
CONFIRM

jenkins — soapui_pro_functional_testing
Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.
2020-09-01
4
CVE-2020-2250
MLIST
CONFIRM

jenkins — valgrind
Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
2020-09-01
5.5
CVE-2020-2245
MLIST
CONFIRM

jitsi — meet_electron
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.
2020-08-29
4.3
CVE-2020-25019
MISC
MISC
MISC

json_project — json
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
2020-08-30
6.5
CVE-2020-7712
MISC
MISC
MISC
MISC
MISC

kleopatra_project — kleopatra
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.
2020-08-29
6.5
CVE-2020-24972
MISC
MISC
GENTOO

mara_cms_project — mara_cms
Mara CMS 7.5 allows contact.php?theme= XSS.
2020-08-30
4.3
CVE-2020-24223
MISC
MISC
MISC

netgear — gs716tv2_firmware
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
2020-08-28
4.3
CVE-2020-5621
JVN
MISC
MISC
MISC

nitori — nitori
NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
2020-08-28
5.8
CVE-2020-5623
MISC

o-dyn — collabtive
An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.
2020-08-31
4.3
CVE-2020-13655
MISC
MISC

online_book_store_project — online_book_store
In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.
2020-08-31
5
CVE-2020-24115
MISC

os4ed — opensis
An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6136
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
2020-09-01
6.5
CVE-2020-6130
MISC

os4ed — opensis
An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6125
MISC

os4ed — opensis
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meet_date parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6128
MISC

os4ed — opensis
SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6132
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6133
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6134
MISC

os4ed — opensis
An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6135
MISC

os4ed — opensis
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
2020-09-01
6.5
CVE-2020-6126
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page CpSessionSet.php is vulnerable to SQL injection.An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
2020-09-01
6.5
CVE-2020-6129
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
2020-09-01
6.5
CVE-2020-6131
MISC

os4ed — opensis
An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6124
MISC

os4ed — opensis
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6127
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6118
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6119
MISC

os4ed — opensis
SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6120
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6121
MISC

os4ed — opensis
SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6122
MISC

os4ed — opensis
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6117
MISC

os4ed — opensis
An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheck.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
2020-09-01
6.5
CVE-2020-6123
MISC

osticket — osticket
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
2020-08-30
4.3
CVE-2020-24917
MISC
MISC
MISC

pix-link — lv-wr07_firmware
XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter.
2020-08-30
4.3
CVE-2020-24104
MISC

premid — premid
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows attackers to obtain sensitive Discord user information.
2020-08-29
5
CVE-2020-24928
MISC

rgb-rust_project — rgb-rust
A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations.
2020-08-29
6.4
CVE-2020-25016
MISC
MISC

riken — xoonips
Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
2020-08-28
4.3
CVE-2020-5625
MISC
MISC
MISC

schneider-electric — somove
Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.
2020-08-31
4.6
CVE-2020-7527
MISC

schneider-electric — spacelynk_firmware
Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.
2020-08-31
5
CVE-2020-7525
MISC

schneider_electric — modbus_driver_suite
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2020-08-31
4.4
CVE-2020-7523
MISC

scratch-wiki — scratch_login
in Scratch Login (MediaWiki extension) before version 1.1, any account can be logged into by using the same username with leading, trailing, or repeated underscore(s), since those are treated as whitespace and trimmed by MediaWiki. This affects all users on any wiki using this extension. Since version 1.1, comments by users whose usernames would be trimmed on MediaWiki are ignored when searching for the verification code.
2020-08-28
6.4
CVE-2020-15164
MISC
CONFIRM

shadan-kun — server_security_type
Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to cause a denial of service which may result in not being able to add newly detected attack source IP addresses as blocking targets for about 10 minutes via a specially crafted request.
2020-09-02
5
CVE-2020-5622
MISC
MISC

sick — lms111_firmware
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
2020-08-31
5
CVE-2020-2075
MISC

slicedinvoices — sliced_invoices
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
2020-08-31
5
CVE-2020-20625
MISC

spinnaker — orca
The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
2020-08-28
5
CVE-2020-9298
MISC

stiltsoft — table_filter_and_charts_for_confluence_server
The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the “Table from CSV” macro (URL parameter).
2020-08-29
4
CVE-2020-24898
MISC

stock_management_system_project — stock_management_system
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.
2020-09-01
4.3
CVE-2020-23831
MISC
MISC

tailor_management_system_project — tailor_management_system
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
2020-09-01
4.3
CVE-2020-23835
MISC

u-root — u-root
This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.
2020-09-01
5
CVE-2020-7666
CONFIRM
CONFIRM

u-root — u-root
This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.
2020-09-01
5
CVE-2020-7665
MISC
MISC

usvn — usvn
USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.
2020-09-01
6.8
CVE-2020-25070
MISC

xuxueli — xxl-job
Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.
2020-09-03
4.3
CVE-2020-23814
MISC
MISC

zyxel — vmg5313-b30b_firmware
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection.
2020-08-31
6.5
CVE-2020-24354
MISC
MISC

Low Vulnerabilities

Primary
Vendor — Product
Description
Published
CVSS Score
Source & Patch Info

basercms — basercms
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.
2020-08-28
2.1
CVE-2020-15154
MISC
CONFIRM

basercms — basercms
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.
2020-08-28
2.1
CVE-2020-15155
MISC
MISC
CONFIRM

elementor — page_builder
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.
2020-08-31
3.5
CVE-2020-15020
MISC
MISC

gigadevice — gd32f103_firmware
The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module.
2020-08-31
2.1
CVE-2020-13472
MISC

gigadevice — gd32f103_firmware
Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.
2020-08-31
2.1
CVE-2020-13470
MISC

gigadevice — gd32vf103_firmware
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU.
2020-08-31
2.1
CVE-2020-13469
MISC

google — android
An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).
2020-08-31
2.1
CVE-2020-25048
MISC

google — android
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software. The S Secure application does not enforce the intended password requirement for a locked application. The Samsung IDs are SVE-2020-16746, SVE-2020-16764 (August 2020).
2020-08-31
2.1
CVE-2020-25047
MISC

google — android
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 (August 2020).
2020-08-31
2.1
CVE-2020-25046
MISC

ibm — infosphere_guardium
IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim’s Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials. IBM X-Force ID: 78294.
2020-09-01
3.5
CVE-2012-3341
CONFIRM
XF

ibm — spectrum_protect_server
IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.
2020-08-28
1.9
CVE-2020-4591
XF
CONFIRM

ibm — spectrum_scale
IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments. IBM X-Force ID: 181992.
2020-08-31
2.1
CVE-2020-4492
XF
CONFIRM

jenkins — build_failure_analyzer
Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.
2020-09-01
3.5
CVE-2020-2244
MLIST
CONFIRM

jenkins — cadence_vmanager
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.
2020-09-01
3.5
CVE-2020-2243
MLIST
CONFIRM

jenkins — git_parameter
Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the ‘Build with Parameters’ page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
2020-09-01
3.5
CVE-2020-2238
MLIST
CONFIRM

jenkins — team_foundation_server
Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
2020-09-01
2.1
CVE-2020-2249
MLIST
CONFIRM

jenkins — valgrind
Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.
2020-09-01
3.5
CVE-2020-2246
MLIST
CONFIRM

redlion — n-tron_702-w_firmware
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).
2020-09-01
3.5
CVE-2020-16206
MISC
FULLDISC
MISC

redlion — n-tron_702-w_firmware
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions).
2020-09-01
3.5
CVE-2020-16210
MISC
FULLDISC
MISC

stiltsoft — table_filter_and_charts_for_confluence_server
The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the “Table from CSV” macro.
2020-08-29
3.5
CVE-2020-24897
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.
2020-09-03
3.5
CVE-2020-25117
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.
2020-09-03
3.5
CVE-2020-25118
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.
2020-09-03
3.5
CVE-2020-25115
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.
2020-09-03
3.5
CVE-2020-25124
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager.
2020-09-03
3.5
CVE-2020-25123
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.
2020-09-03
3.5
CVE-2020-25122
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.
2020-09-03
3.5
CVE-2020-25116
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.
2020-09-03
3.5
CVE-2020-25120
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
2020-09-03
3.5
CVE-2020-25119
MISC

vbulletin — vbulletin
The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
2020-09-03
3.5
CVE-2020-25121
MISC

Severity Not Yet Assigned

Primary
Vendor — Product
Description
Published
CVSS Score
Source & Patch Info

accusoft — imagegear

A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
2020-09-01
not yet calculated
CVE-2020-6151
MISC

accusoft — imagegear

A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file.
2020-09-01
not yet calculated
CVE-2020-6152
MISC

add-apt-repository — add-apt-repository

Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways.
2020-09-05
not yet calculated
CVE-2020-15709
MISC

apache — cassandra

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.
2020-09-01
not yet calculated
CVE-2020-13946
MLIST
MLIST
MISC

apex_microelectronics — apm32f103_devices

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
2020-08-31
not yet calculated
CVE-2020-13471
MISC

apex_microelectronics — apm32f103_devices

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
2020-08-31
not yet calculated
CVE-2020-13463
MISC

aruba — clearpass
A vulnerability exists in the Aruba ClearPass C1000 S-1200 R4 HW-Based Appliance Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.
2020-09-04
not yet calculated
CVE-2020-7119
MISC

atlassian — jira_server_and_data_center

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.
2020-09-01
not yet calculated
CVE-2020-14178
MISC

beijing_qihoo_technology — 360_speed_browser
360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology.
2020-09-03
not yet calculated
CVE-2020-24158
MISC

best_support_system — best_support_system

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
2020-09-04
not yet calculated
CVE-2020-24963
MISC
MISC

bestzip — bestzip

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.
2020-09-04
not yet calculated
CVE-2020-7730
MISC
MISC

bundler — bundler

Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user’s home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.
2020-09-04
not yet calculated
CVE-2019-3881
MISC

canonical — ubuntu

The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504.
2020-09-01
not yet calculated
CVE-2020-15704
UBUNTU
UBUNTU

china_key_systems_&_integrated_circuit — cks32f103_devices
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.
2020-08-31
not yet calculated
CVE-2020-13464
MISC

china_key_systems_&_integrated_circuit — cks32f103_devices

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
2020-08-31
not yet calculated
CVE-2020-13467
MISC

cisco — asyncos_and_email_security_appliance

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface of an affected device. A successful exploit could allow the attacker to obtain the IP addresses that are configured on the internal interfaces of the affected device. There is a workaround that addresses this vulnerability.
2020-09-04
not yet calculated
CVE-2020-3546
CISCO

cisco — enterprise_nfv_infrastructure_software
A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.
2020-09-04
not yet calculated
CVE-2020-3478
CISCO

cisco — enterprise_nfv_infrastructure_software

A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. The vulnerability is due to a flaw in the logic that governs directory permissions. An attacker could exploit this vulnerability by using capabilities that are not controlled by the role-based access control (RBAC) mechanisms of the software. A successful exploit could allow the attacker to overwrite files on an affected device.
2020-09-04
not yet calculated
CVE-2020-3365
CISCO

cisco — fxos_software

A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this vulnerability by supplying a crafted file that, when it is processed, may cause a stack-based buffer overflow. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges. An attacker would need to have valid administrative credentials to exploit this vulnerability.
2020-09-04
not yet calculated
CVE-2020-3545
CISCO

cisco — ios_xr_software

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks.
2020-09-04
not yet calculated
CVE-2020-3473
CISCO

cisco — ios_xr_software

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The vulnerability is due to incorrect mapping in the source code of task group assignments for a specific command. An attacker could exploit this vulnerability by issuing the command, which they should not be authorized to issue, on an affected device. A successful exploit could allow the attacker to invalidate the integrity of the disk and cause the device to restart. This vulnerability could allow a user with read permissions to issue a specific command that should require Administrator privileges.
2020-09-04
not yet calculated
CVE-2020-3530
CISCO

cisco — jabber

A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages to a targeted system. A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, possibly for use in further attacks.
2020-09-04
not yet calculated
CVE-2020-3498
CISCO

cisco — jabber_for_windows

A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages that contain Universal Naming Convention (UNC) links to a targeted user and convincing the user to follow the provided link. A successful exploit could allow the attacker to cause the application to access a remote system, possibly allowing the attacker to gain access to sensitive information that the attacker could use in additional attacks.
2020-09-04
not yet calculated
CVE-2020-3537
CISCO

cisco — jabber_for_windows

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.
2020-09-04
not yet calculated
CVE-2020-3495
CISCO

cisco — jabber_for_windows

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this vulnerability by convincing a user to click a link within a message sent by email or other messaging platform. A successful exploit could allow the attacker to execute arbitrary commands on a targeted system with the privileges of the user account that is running the Cisco Jabber client software.
2020-09-04
not yet calculated
CVE-2020-3430
CISCO

cisco — multiple_products

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe logging of authentication requests by the affected software. An attacker could exploit this vulnerability by reading log files that are stored in the application directory. A successful exploit could allow the attacker to gain access to sensitive information, which could be used in further attacks.
2020-09-04
not yet calculated
CVE-2020-3541
CISCO

cisco — multiple_products

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because an insecure method is used to mask certain passwords on the web-based management interface. An attacker could exploit this vulnerability by looking at the raw HTML code that is received from the interface. A successful exploit could allow the attacker to obtain some of the passwords configured throughout the interface.
2020-09-04
not yet calculated
CVE-2020-3547
CISCO

cisco — small_business_rv340_series_routers

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.
2020-09-04
not yet calculated
CVE-2020-3451
CISCO

cisco — webex_training

A vulnerability in Cisco Webex Training could allow an authenticated, remote attacker to join a password-protected meeting without providing the meeting password. The vulnerability is due to improper validation of input to API requests that are a part of meeting join flow. An attacker could exploit this vulnerability by sending an API request to the application, which would return a URL that includes a meeting join page that is prepopulated with the meeting username and password. A successful exploit could allow the attacker to join the password-protected meeting. The attacker would be visible in the attendee list of the meeting.
2020-09-04
not yet calculated
CVE-2020-3542
CISCO

cloud_foundry — capi

Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the “cloud_controller.read” scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).
2020-09-03
not yet calculated
CVE-2020-5418
CONFIRM

cloud_foundry — routing

Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with “cf push” access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
2020-09-03
not yet calculated
CVE-2020-5420
CONFIRM

concrete5 — concrete5

Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.
2020-09-04
not yet calculated
CVE-2020-24986
MISC

d-link — dcs-2530l_and_dcs-2670l_devices

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.
2020-09-02
not yet calculated
CVE-2020-25079
MISC
MISC

d-link — dcs-2530l_and_dcs-2670l_devices

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.
2020-09-02
not yet calculated
CVE-2020-25078
MISC
MISC

dell — emc_ecs

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.
2020-09-02
not yet calculated
CVE-2020-5386
MISC

dell — emc_isilon_onefs

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files.
2020-09-02
not yet calculated
CVE-2020-5369
MISC

dell — g7_17_7790_bios

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
2020-09-02
not yet calculated
CVE-2020-5378
MISC

dell — inspiron_7347_bios

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
2020-09-02
not yet calculated
CVE-2020-5376
MISC

dell — inspiron_7352_bios

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
2020-09-02
not yet calculated
CVE-2020-5379
MISC

django — django
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.
2020-09-01
not yet calculated
CVE-2020-24583
MISC
MISC
MISC
UBUNTU
MISC
MISC

django — django
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system’s standard umask rather than 0o077.
2020-09-01
not yet calculated
CVE-2020-24584
MISC
MISC
MISC
UBUNTU
MISC
MISC

dolibarr — dolibarr
Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism).
2020-09-02
not yet calculated
CVE-2020-14209
CONFIRM
MISC

dolibarr — dolibarr

Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or address parameter; product/card.php with the label or customcode parameter; or societe/card.php with the alias or barcode parameter.
2020-08-31
not yet calculated
CVE-2020-13828
MISC

duffel — paginator

There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the paginate() function. This will potentially affect all current users of Paginator prior to version 1.0.0. The vulnerability has been patched in version 1.0.0 and all users should upgrade to this version immediately. Note that this patched version uses a dependency that requires an Elixir version >=1.5.
2020-09-01
not yet calculated
CVE-2020-15150
CONFIRM
CONFIRM
CONFIRM
CONFIRM

enghouse — web_chat

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951.
2020-09-03
not yet calculated
CVE-2020-13972
MISC

eramba — eramba_and_eramba_enterprise
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
2020-09-03
not yet calculated
CVE-2020-25104
MISC
MISC

eramba — eramba_and_eramba_enterprise
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
2020-09-03
not yet calculated
CVE-2020-25105
MISC
MISC

erlang — rebar3

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.
2020-09-02
not yet calculated
CVE-2020-13802
MISC
MISC
MISC

espressif — esp32_devices
The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.
2020-08-31
not yet calculated
CVE-2020-13594
MISC
MISC
MISC

espressif — esp32_devices

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can silently trigger the assertion (which disables the target’s BLE stack) by sending a crafted sequence of BLE packets.
2020-08-31
not yet calculated
CVE-2020-13595
MISC
MISC
MISC

facebook — hermes

A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
2020-09-04
not yet calculated
CVE-2020-1911
CONFIRM
CONFIRM

forlogic — qualiex
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.
2020-09-02
not yet calculated
CVE-2020-24028
MISC
MISC
MISC

forlogic — qualiex
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.
2020-09-02
not yet calculated
CVE-2020-24029
MISC
MISC

forlogic — qualiex
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse.
2020-09-02
not yet calculated
CVE-2020-24030
MISC
MISC

foxit — reader_and_phantompdf

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur.
2020-09-04
not yet calculated
CVE-2020-12247
MISC

foxit — reader_and_phantompdf

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.
2020-09-04
not yet calculated
CVE-2020-12248
MISC

foxit — reader_and_phantompdf

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.
2020-09-04
not yet calculated
CVE-2020-11493
MISC

freedombox — freedombox

FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service (or from PageKite) is considered a local connection. This affects both the freedombox and plinth packages of some Linux distributions, but only if the Apache mod_status module is enabled.
2020-09-02
not yet calculated
CVE-2020-25073
MISC

ghostscript — ghostscript

A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.
2020-09-03
not yet calculated
CVE-2020-14373
MISC
MISC
MISC

gmapfp — gmapfp
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
2020-09-01
not yet calculated
CVE-2020-23971
MISC

gnome_project — libxml2
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
2020-09-04
not yet calculated
CVE-2020-24977
MISC

gnu — bison

An assertion failure was found in src/parse-gram.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file containing character ” at the end and while still in a character or a string.
2020-09-04
not yet calculated
CVE-2020-24980
MISC
MISC

gnu — bison

A Buffer Overflow vulnerability was found in src/symtab.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file redefining the EOF token, which could triggers Heap buffer overflow and thus cause system crash.
2020-09-04
not yet calculated
CVE-2020-24979
MISC
MISC

gnupg — gnupg

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker’s OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
2020-09-03
not yet calculated
CVE-2020-25125
MLIST
MLIST
MISC
MISC
MISC
MISC

gnutls — gnutls

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application’s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.
2020-09-04
not yet calculated
CVE-2020-24659
MISC
GENTOO
MISC

grunt — grunt

The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
2020-09-03
not yet calculated
CVE-2020-7729
CONFIRM
CONFIRM
CONFIRM
CONFIRM

guangzhou_netease_computer_system — netease_mail_master
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.
2020-09-03
not yet calculated
CVE-2020-24161
MISC

guangzhou_netease_computer_system — netease_youdao_dictionary
NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0.
2020-09-03
not yet calculated
CVE-2020-24159
MISC

huawei — honor_20_pro_smartphones
Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.
2020-09-03
not yet calculated
CVE-2020-9235
MISC

huawei — mate_20_smartphones

HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service.
2020-09-03
not yet calculated
CVE-2020-9083
MISC

huawei — multiple_products

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
2020-09-03
not yet calculated
CVE-2020-9199
MISC

ibm — api_connect

IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.
2020-09-03
not yet calculated
CVE-2020-4337
XF
CONFIRM

ibm — api_manager

IBM API Connect’s API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.
2020-09-03
not yet calculated
CVE-2020-4638
XF
CONFIRM

ibm — aspera_connect

IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190.
2020-09-04
not yet calculated
CVE-2020-4545
XF
CONFIRM

ibm — infosphere_information_server

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187.
2020-09-04
not yet calculated
CVE-2020-4702
XF
CONFIRM

ibm — infosphere_metadata_asset_manager

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.
2020-09-04
not yet calculated
CVE-2020-4632
XF
CONFIRM

ibm — jazz_team_server
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.
2020-09-02
not yet calculated
CVE-2020-4522
XF
CONFIRM

ibm — jazz_team_server

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.
2020-09-02
not yet calculated
CVE-2020-4445
XF
CONFIRM

ibm — jazz_team_server

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.
2020-09-02
not yet calculated
CVE-2020-4546
XF
CONFIRM

ibm — spectrum_protect_operations_center

IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.
2020-09-02
not yet calculated
CVE-2020-4693
XF
CONFIRM

ignite_realtime — openfire

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName”, “searchValue”, “searchDescription”, “searchDefaultValue”,”searchPlugin”, “searchDescription” and “searchDynamic” in the Server Properties and Security Audit Viewer JSP page
2020-09-02
not yet calculated
CVE-2020-24602
MISC

ignite_realtime — openfire

In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName”, “alias” in the import certificate trusted page
2020-09-02
not yet calculated
CVE-2020-24601
MISC

ignite_realtime — openfire

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request “searchName”, “searchValue”, “searchDescription”, “searchDefaultValue”,”searchPlugin”, “searchDescription” and “searchDynamic” in server-properties.jsp and security-audit-viewer.jsp
2020-09-02
not yet calculated
CVE-2020-24604
MISC

kaspersky — security_center_and_security_center_web_console

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.
2020-09-02
not yet calculated
CVE-2020-25045
MISC

kaspersky — virus_removal_tool

Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system.
2020-09-02
not yet calculated
CVE-2020-25044
MISC

kaspersky — vpn_secure_connection
The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system.
2020-09-02
not yet calculated
CVE-2020-25043
MISC

kde — ark

In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user’s home directory.
2020-09-02
not yet calculated
CVE-2020-24654
SUSE
CONFIRM
CONFIRM
CONFIRM
DEBIAN

laravel — laravel

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
2020-09-04
not yet calculated
CVE-2020-24940
MISC

laravel — laravel

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
2020-09-04
not yet calculated
CVE-2020-24941
MISC

lenovo — multiple_thinkpad_devices

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
2020-09-01
not yet calculated
CVE-2020-8341
MISC

lenovo — thinkpad_a285_devices

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.
2020-09-01
not yet calculated
CVE-2020-8335
MISC

librehealth — ehr

interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.
2020-09-01
not yet calculated
CVE-2020-23829
MISC
MISC

liferay — liferay_portal
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
2020-09-01
not yet calculated
CVE-2020-24554
MISC
CONFIRM

linux — linux_kernel
A flaw was found in the Linux kernel’s implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.
2020-09-03
not yet calculated
CVE-2020-10720
MISC
MISC

magmi — magmi

MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting max_connections (default 151) is lower than Apache (or another web server) setting MaxRequestWorkers (formerly MaxClients) (default 256). This can be done by sending at least 151 simultaneous requests to the Magento website to trigger a “Too many connections” error, then use default magmi:magmi basic authentication to remotely bypass authentication.
2020-09-01
not yet calculated
CVE-2020-5777
MISC

magmi — magmi

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.
2020-09-01
not yet calculated
CVE-2020-5776
MISC

mara_cms — mara_cms

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
2020-09-03
not yet calculated
CVE-2020-25042
MISC
MISC

mcafee — true_key

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.
2020-09-04
not yet calculated
CVE-2020-7299
CONFIRM

midnightbsd_and_freebsd — midnightbsd_and_freebsd
A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.
2020-09-03
not yet calculated
CVE-2020-24863
CONFIRM
MISC
CONFIRM
MISC

midnightbsd_and_freebsd — midnightbsd_and_freebsd
In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the running kernel. During binary interaction, td->td_emuldata in sys/compat/linux/linux_emul.h is not getting initialized and returns NULL from em_find().
2020-09-03
not yet calculated
CVE-2020-24385
CONFIRM
MISC

milller — miller
In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary code by placing a malicious `.mlrrc` file in the working directory. See linked GitHub Security Advisory for complete details. A fix is ready and will be released as Miller 5.9.1.
2020-09-02
not yet calculated
CVE-2020-15167
CONFIRM

modicon — m218_logic_controller

Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.
2020-08-31
not yet calculated
CVE-2020-7524
MISC

multiple_vendors — multiple_products

All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements.
2020-09-01
not yet calculated
CVE-2020-14514
MISC

multiux — multiux

A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field.
2020-09-02
not yet calculated
CVE-2020-17458
MISC
MISC

nasm — nasm

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.
2020-09-04
not yet calculated
CVE-2020-24978
MISC

netapp — clustered_data_ontap
Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.
2020-09-02
not yet calculated
CVE-2020-8576
MISC

netgear — r8300_devices
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.
2020-09-01
not yet calculated
CVE-2020-25067
MISC

noise-java — noise-java

An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access.
2020-09-04
not yet calculated
CVE-2020-25022
MISC
FULLDISC
MISC
CONFIRM

noise-java — noise-java

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access.
2020-09-04
not yet calculated
CVE-2020-25023
MISC
FULLDISC
MISC
CONFIRM

noise-java — noise-java

An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access.
2020-09-04
not yet calculated
CVE-2020-25021
MISC
FULLDISC
MISC
CONFIRM

open-xchange — ox_app_suite

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.
2020-08-31
not yet calculated
CVE-2020-12646
MISC

open-xchange — ox_app_suite

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.
2020-08-31
not yet calculated
CVE-2020-12643
FULLDISC
MISC

open-xchange — ox_app_suite

OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.
2020-08-31
not yet calculated
CVE-2020-12644
MISC
MISC

open-xchange — ox_app_suite

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.
2020-08-31
not yet calculated
CVE-2020-12645
MISC
MISC

openfind — mail2000

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
2020-09-01
not yet calculated
CVE-2020-12776
CONFIRM

oscommerce — ce_phoenix
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/order_status.php, catalog/admin/tax_rates.php, catalog/admin/languages.php, catalog/admin/countries.php, catalog/admin/tax_classes.php, catalog/admin/reviews.php, or catalog/admin/zones.php; or the zpage or spage parameter to catalog/admin/geo_zones.php.
2020-09-03
not yet calculated
CVE-2020-12058
MISC
MISC
MISC

oswapp — warehouse_inventory_system
A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin’s password after an authenticated admin visits a third-party site.
2020-09-01
not yet calculated
CVE-2020-23836
MISC
MISC

pancake — pancake

Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
2020-09-03
not yet calculated
CVE-2020-24876
MISC

php-fusion — php-fusion

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).
2020-09-03
not yet calculated
CVE-2020-24949
MISC

phpkb — phpkb

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
2020-09-03
not yet calculated
CVE-2020-11579
MISC
MISC
MISC
MISC

project_acrn — acrn

Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and Denial of Service (DoS) for previously assigned PCIe devices to the Service VM at runtime.
2020-08-31
not yet calculated
CVE-2020-15687
MISC
MISC
MISC

python_packaging_authority — python_package_index

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
2020-09-04
not yet calculated
CVE-2019-20916
MISC
MISC
MISC

qemu — qemu

In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.
2020-08-31
not yet calculated
CVE-2020-12829
MISC
UBUNTU

raonwiz — roan_kupload
RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.
2020-09-02
not yet calculated
CVE-2020-7830
MISC

rapid7 — metasploit

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.
2020-09-01
not yet calculated
CVE-2019-5645
MISC

rapid7 — nexpose

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.
2020-09-03
not yet calculated
CVE-2020-7382
CONFIRM

rapid7 — nexpose

In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Security Console installation and any arbitrary code executable using the same file name.
2020-09-03
not yet calculated
CVE-2020-7381
CONFIRM

razer_chroma — sdk_rest_server

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under “%PROGRAMDATA%Razer ChromaSDKApps” can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
2020-09-02
not yet calculated
CVE-2020-16602
MISC
MISC
MISC

real_time_logic — barracudadrive

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%bdbd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.
2020-09-04
not yet calculated
CVE-2020-23834
MISC
MISC

red_lion — n-tron_702-w_and_n-tron_702m12-w_devices
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions).
2020-09-01
not yet calculated
CVE-2020-16208
MISC
FULLDISC
MISC

sagemcom — f@st_5280_routers

Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise.
2020-09-01
not yet calculated
CVE-2020-24034
MISC
FULLDISC
MISC
MISC

samsung — multiple_mobile_devices

An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 (August 2020).
2020-08-31
not yet calculated
CVE-2020-25054
MISC

senstar — symphony

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSOAuth process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10980.
2020-09-01
not yet calculated
CVE-2020-17405
N/A

setelsa — conacwin

Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/file_to_disclose Directory Traversal URI.
2020-09-03
not yet calculated
CVE-2020-25068
MISC
MISC
MISC

shenzhen_tencent_computer_system — tencent_app_pc
The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.
2020-09-03
not yet calculated
CVE-2020-24162
MISC

shenzhen_tencent_computer_system — tim_windows_client
Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code.
2020-09-03
not yet calculated
CVE-2020-24160
MISC

silverstripe-advancereports — silverstripe-advancereports
silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.
2020-09-03
not yet calculated
CVE-2020-25102
MISC
MISC

sourcecodester — daily_tracker_system
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
2020-09-03
not yet calculated
CVE-2020-24193
MISC
MISC

sourcecodester — stock_management_system

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim’s username when they visit a third-party site.
2020-09-02
not yet calculated
CVE-2020-23830
MISC
MISC

spiceworks — spiceworks

Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.
2020-09-01
not yet calculated
CVE-2020-23450
MISC
MISC
MISC

squid — squid

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local security and poison the browser cache and any downstream caches with content from an arbitrary source. Squid uses a string search instead of parsing the Transfer-Encoding header to find chunked encoding. This allows an attacker to hide a second request inside Transfer-Encoding: it is interpreted by Squid as chunked and split out into a second request delivered upstream. Squid will then deliver two distinct responses to the client, corrupting any downstream caches.
2020-09-02
not yet calculated
CVE-2020-15811
SUSE
MISC
FEDORA
FEDORA
UBUNTU
DEBIAN

squid — squid

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local security and poison the proxy cache and any downstream caches with content from an arbitrary source. When configured for relaxed header parsing (the default), Squid relays headers containing whitespace characters to upstream servers. When this occurs as a prefix to a Content-Length header, the frame length specified will be ignored by Squid (allowing for a conflicting length to be used from another Content-Length header) but relayed upstream.
2020-09-02
not yet calculated
CVE-2020-15810
SUSE
MISC
FEDORA
FEDORA
UBUNTU
DEBIAN

stmicroelectronics — stm32f103_devices
STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
2020-08-31
not yet calculated
CVE-2020-13466
MISC

superantispyware — professional_x_trail

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.
2020-09-01
not yet calculated
CVE-2020-24955
MISC
MISC

suse — multiple_products

A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.
2020-09-01
not yet calculated
CVE-2020-8023
CONFIRM

suse — opensuse_open_build_service

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .
2020-09-01
not yet calculated
CVE-2018-12475
CONFIRM

symfony — symfony

In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class was initially written with surrogate caching and ESI support in mind (all HTTP calls come from a trusted backend in that scenario). But when used by CachingHttpClient and if an attacker can control the response for a request being made by the CachingHttpClient, remote code execution is possible. This has been fixed in versions 4.4.13 and 5.1.5.
2020-09-02
not yet calculated
CVE-2020-15094
MISC
CONFIRM
MISC
MISC

teamwire — teamwire

The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component.
2020-09-02
not yet calculated
CVE-2020-12621
MISC
MISC

tenda — ac18_router
Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to “radius”.
2020-09-04
not yet calculated
CVE-2020-24987
MISC
MISC

texas_instruments — simplelink-cc2640r2-sdk
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radio range can achieve arbitrary read/write access to protected GATT service data, cause a denial of service, or possibly control a device’s function by establishing an encrypted session with an unauthenticated Long Term Key (LTK).
2020-08-31
not yet calculated
CVE-2020-13593
MISC
MISC
MISC

thomson_and_philips — tht741fta_and_dtr3502bfta_dvb-t2_devices
THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the TELNET protocol.
2020-08-31
not yet calculated
CVE-2020-11618
MISC

thomson_and_philips — tht741fta_and_dtr3502bfta_dvb-t2_devices

The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn’t validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client.
2020-08-31
not yet calculated
CVE-2020-11617
MISC

thomson_reuters — eikon

Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%Thomson ReutersEikon permissions.
2020-09-03
not yet calculated
CVE-2019-10679
MISC
FULLDISC
MISC
MISC
MISC

tp-link — tl-wa855re_v5_devices

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.
2020-08-31
not yet calculated
CVE-2020-24363
MISC
MISC
MISC

trading_technologies_messaging — trading_technologies_messaging
A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It’s been observed that ttmd.exe terminates as a result.
2020-09-02
not yet calculated
CVE-2020-5779
MISC

trading_technologies_messaging — trading_technologies_messaging
A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate ttmd.exe.
2020-09-02
not yet calculated
CVE-2020-5778
MISC

trend_micro — apex_one
A vulnerability in an Trend Micro Apex One dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
2020-09-01
not yet calculated
CVE-2020-24558
MISC
MISC

trend_micro — apex_one_and_officescan_xg_sp1
A vulnerability in Trend Micro Apex One and OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
2020-09-01
not yet calculated
CVE-2020-24556
MISC
MISC
MISC

trend_micro — apex_one_on_macos

A vulnerability in Trend Micro Apex One on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
2020-09-01
not yet calculated
CVE-2020-24559
MISC
MISC

trend_micro — apex_one_on_microsoft_windows

A vulnerability in Trend Micro Apex One on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
2020-09-01
not yet calculated
CVE-2020-24557
MISC
MISC

trusted_firmware — mbed_tls
A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.
2020-09-02
not yet calculated
CVE-2020-16150
MISC
CONFIRM

typo3 — typo3
The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).
2020-09-02
not yet calculated
CVE-2020-25025
MISC
CONFIRM

typo3 — typo3
The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.
2020-09-02
not yet calculated
CVE-2020-25026
MISC
CONFIRM

u-root — u-root

This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
2020-09-01
not yet calculated
CVE-2020-7669
CONFIRM
CONFIRM

ucms — ucms

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.
2020-09-04
not yet calculated
CVE-2020-24981
MISC

vmware — rabbitmq

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.
2020-08-31
not yet calculated
CVE-2020-5419
CONFIRM

whatsapp — multiple_products

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.
2020-09-03
not yet calculated
CVE-2020-1891
CONFIRM

whatsapp — multiple_products
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.
2020-09-03
not yet calculated
CVE-2020-1894
CONFIRM

whatsapp — whatsapp_desktop

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.
2020-09-03
not yet calculated
CVE-2019-11928
CONFIRM

whatsapp — whatsapp_desktop

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.
2020-09-03
not yet calculated
CVE-2020-1889
CONFIRM

whatsapp — whatsapp_for_android_and_whatsapp_business_for_android

A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
2020-09-03
not yet calculated
CVE-2020-1890
CONFIRM

whatsapp — whatsapp_for_android_and_whatsapp_business_for_android

A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.
2020-09-03
not yet calculated
CVE-2020-1886
CONFIRM

wordpress — wordpress
lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS.
2020-08-31
not yet calculated
CVE-2020-20626
MISC

wordpress — wordpress
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.
2020-08-31
not yet calculated
CVE-2020-20627
MISC

wordpress — wordpress

The ao_ccss_import AJAX call in Autoptimize WordPress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PHP, leading to remote command execution.
2020-09-03
not yet calculated
CVE-2020-24948
MISC

xpdf — xpdf

There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
2020-09-03
not yet calculated
CVE-2020-24999
MISC

xpdf — xpdf

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
2020-09-03
not yet calculated
CVE-2020-24996
MISC

xxl-job — xxl-job
xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
2020-09-03
not yet calculated
CVE-2020-23811
MISC

zoho — manageengine_applications_manager

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
2020-09-04
not yet calculated
CVE-2020-14008
MISC
MISC
MISC

zoho — manageengine_exchange_reporter_plus

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number 12136, ADAudit Plus before build number 6052, O365 Manager Plus before build number 4334, Cloud Security Plus before build number 4110, ADManager Plus before build number 7055, and Log360 before build number 5166. The remotely accessible Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails is prone to an authentication bypass. System integration properties can be modified and lead to full ManageEngine suite compromise.
2020-08-31
not yet calculated
CVE-2020-24786
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC

zte — zxiptv_and_zxiptv-web-pv
A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04.
2020-09-01
not yet calculated
CVE-2020-6874
MISC

zte — zxr1-_2800-4_almpufb(low)

A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40.
2020-09-01
not yet calculated
CVE-2020-6873
MISC

zyxel — vmg5313-b30b_router

Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing “FirstIndex” field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.
2020-09-02
not yet calculated
CVE-2020-24355
MISC
MISC
MISC

This product is provided subject to this Notification and this Privacy & Use policy.Original release date: September 7, 2020

High Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
arr-flatten-unflatten_project — arr-flatten-unflatten	All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.	2020-09-01	7.5	CVE-2020-7713 CONFIRM
canonical — checkinstall	checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file.	2020-08-31	7.2	CVE-2020-25031 MISC
cisco — ios_xr	A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address this vulnerability.	2020-08-29	7.8	CVE-2020-3566 CISCO
deep-get-set_project — deep-get-set	All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.	2020-09-01	7.5	CVE-2020-7715 MISC
digitalbazzar — forge	The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.	2020-09-01	7.5	CVE-2020-7720 CONFIRM MISC MISC
dot-notes_project — dot-notes	All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.	2020-09-01	7.5	CVE-2020-7717 MISC
gammautils_project — gammautils	All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.	2020-09-01	7.5	CVE-2020-7718 MISC
gedi_project — gedi	All versions of package gedi are vulnerable to Prototype Pollution via the set function.	2020-09-01	7.5	CVE-2020-7727 MISC
google — android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged SecureFolder process) to bypass admin restrictions in KnoxContainer. The Samsung ID is SVE-2020-18133 (August 2020).	2020-08-31	7.5	CVE-2020-25055 MISC
google — android	An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung ID is SVE-2020-17797 (August 2020).	2020-08-31	7.5	CVE-2020-25049 MISC
google — android	An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or cause a denial of service (memory corruption) because indexes are mishandled. The Samsung ID is SVE-2020-17426 (August 2020).	2020-08-31	7.5	CVE-2020-25052 MISC
google — android	An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 (August 2020).	2020-08-31	7.5	CVE-2020-25053 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020).	2020-08-31	7.5	CVE-2020-25062 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011 (July 2020).	2020-08-31	7.5	CVE-2020-25057 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020).	2020-08-31	7.5	CVE-2020-25061 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020).	2020-08-31	7.8	CVE-2020-25065 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020).	2020-08-31	7.5	CVE-2020-25058 MISC
guidesmiths — worksmith	All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.	2020-09-01	7.5	CVE-2020-7725 MISC
heybbs_project — heybbs	Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.	2020-09-03	7.5	CVE-2020-25005 MISC MISC
heybbs_project — heybbs	Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.	2020-09-03	7.5	CVE-2020-25006 MISC MISC
heybbs_project — heybbs	Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.	2020-09-03	7.5	CVE-2020-25004 MISC MISC
invertase — deeps	All versions of package deeps are vulnerable to Prototype Pollution via the set function.	2020-09-01	7.5	CVE-2020-7716 MISC
locutus_project — locutus	Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.	2020-09-01	7.5	CVE-2020-7719 CONFIRM MISC
mpxj — mpxj	MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.	2020-08-29	7.5	CVE-2020-25020 MISC
node-oojs_project — node-oojs	All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.	2020-09-01	7.5	CVE-2020-7721 MISC
nodee-utils_project — nodee-utils	All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.	2020-09-01	7.5	CVE-2020-7722 MISC
os4ed — opensis	An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6141 MISC
os4ed — opensis	SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6138 MISC
os4ed — opensis	SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6137 MISC
os4ed — opensis	A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6144 MISC
os4ed — opensis	A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6143 MISC
os4ed — opensis	A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6142 MISC
os4ed — opensis	SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6140 MISC
os4ed — opensis	SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.	2020-09-01	7.5	CVE-2020-6139 MISC
qemu — qemu	An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice ‘setup_len’ exceeds its ‘data_buf[4096]’ in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.	2020-08-31	7.2	CVE-2020-14364 MISC MISC MISC
realseriousgames — confucious	All versions of package confucious are vulnerable to Prototype Pollution via the set function.	2020-09-01	7.5	CVE-2020-7714 MISC
redlion — n-tron_702-w_firmware	The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).	2020-09-01	10	CVE-2020-16204 MISC FULLDISC MISC
riken — xoonips	SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	2020-08-28	7.5	CVE-2020-5624 MISC MISC MISC
rpm — librepro	A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.	2020-08-30	8.5	CVE-2020-14352 MISC MISC
safe-object2_project — safe-object2	All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.	2020-09-01	7.5	CVE-2020-7726 MISC
schneider-electric — apc_easy_ups_online_software	Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists in SFAPV9601 – APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet` which may lead to uploading executable files to non-specified directories.	2020-08-31	7.5	CVE-2020-7521 MISC
schneider-electric — apc_easy_ups_online_software	Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists in SFAPV9601 – APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServlet` which may lead to uploading executable files to non-specified directories.	2020-08-31	7.5	CVE-2020-7522 MISC
tiny-conf_project — tiny-conf	All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.	2020-09-01	7.5	CVE-2020-7724 MISC
usvn — usvn	USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.	2020-09-01	7.5	CVE-2020-25069 MISC
yola — promisehelpers	All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.	2020-09-01	7.5	CVE-2020-7723 MISC

Medium Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
apc — powerchute	Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.	2020-08-31	6.5	CVE-2020-7526 MISC
appsaloon — wp-gdpr	controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.	2020-08-31	4.3	CVE-2020-20628 MISC
basercms — basercms	baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and UploaderFilesController.php. This is fixed in version 4.3.7.	2020-08-28	4.6	CVE-2020-15159 MISC MISC CONFIRM
bitdefender — endpoint_security	An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product’s security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.	2020-08-30	4.6	CVE-2020-8097 MISC
blubrry — subscribe_sidebar	The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS.	2020-08-31	4.3	CVE-2020-25033 MISC MISC
bufferlist_project — bufferlist	A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1 and <2.2.1 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.	2020-08-30	5.5	CVE-2020-8244 MISC
chamber_dashboard_business_directory_project — chamber_dashboard_business_directory	The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.	2020-08-31	4.3	CVE-2020-24699 MISC MISC
chameleon_mini_live_debugger_project — chameleon_mini_live_debugger	Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it’s sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.	2020-08-28	6.4	CVE-2020-15165 CONFIRM MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php.	2020-09-03	4.3	CVE-2020-25087 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php.	2020-09-03	4.3	CVE-2020-25090 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php.	2020-09-03	4.3	CVE-2020-25089 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in _parts/header.php, within application/views/templates/clothesshop, application/views/templates/greenlabel, and application/views/templates/redlabel.	2020-09-03	4.3	CVE-2020-25092 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.	2020-09-03	4.3	CVE-2020-25091 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/adminUsers.php.	2020-09-03	4.3	CVE-2020-25086 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application/views/templates/clothesshop, application/views/templates/onepage, and application/views/templates/redlabel.	2020-09-03	4.3	CVE-2020-25093 MISC
ecommerce-codeigniter-bootstrap_project — ecommerce-codeigniter-bootstrap	Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php.	2020-09-03	4.3	CVE-2020-25088 MISC
flask-cors_project — flask-cors	An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.	2020-08-31	5	CVE-2020-25032 MISC
forgerock — identity_manager	Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6.	2020-08-31	4.3	CVE-2020-17465 MISC MISC
get-simple — getsimple_cms	A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client’s browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.	2020-09-01	4.3	CVE-2020-23839 MISC
gigadevice — gd32f103_firmware	The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface.	2020-08-31	4.6	CVE-2020-13465 MISC
gigadevice — gd32f130_firmware	Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection).	2020-08-31	4.6	CVE-2020-13468 MISC
golang — go	Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.	2020-09-02	4.3	CVE-2020-24553 MISC FULLDISC MISC
google — android	An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chipset is mishandled. The Samsung ID is SVE-2020-16169 (August 2020).	2020-08-31	5	CVE-2020-25056 MISC
google — android	An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppInfo. The Samsung ID is SVE-2020-17758 (August 2020).	2020-08-31	5	CVE-2020-25051 MISC
google — android	An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (August 2020).	2020-08-31	5	CVE-2020-25050 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can occur because of incorrect application-level input validation. The LG ID is LVE-SMP-200018 (July 2020).	2020-08-31	5	CVE-2020-25063 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020).	2020-08-31	5	CVE-2020-25059 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020).	2020-08-31	5	CVE-2020-25064 MISC
google — android	An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020).	2020-08-31	4.6	CVE-2020-25060 MISC
grafana — grafana	Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.	2020-08-28	4	CVE-2019-19499 MISC
hoosk — hoosk	Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user’s intention.	2020-08-28	4.3	CVE-2020-16610 MISC CONFIRM
ibm — infosphere_guardium	IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282.	2020-09-01	6.5	CVE-2012-3336 CONFIRM XF
ibm — infosphere_guardium	IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.	2020-09-01	4	CVE-2012-3340 CONFIRM XF
ibm — infosphere_guardium	IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.	2020-09-01	5	CVE-2012-3337 CONFIRM XF
ibm — infosphere_guardium	IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286.	2020-09-01	5	CVE-2012-3338 CONFIRM XF
ibm — resilient_security_orchestration_automation_and_response	IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.	2020-08-28	4	CVE-2019-4533 XF CONFIRM
ibm — resilient_security_orchestration_automation_and_response	IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236.	2020-08-28	4	CVE-2019-4579 XF CONFIRM
ibm — spectrum_protect	IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613.	2020-08-28	5	CVE-2020-4559 XF CONFIRM
jenkins — database	A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.	2020-09-01	6.8	CVE-2020-2241 MLIST CONFIRM
jenkins — database	A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.	2020-09-01	6.8	CVE-2020-2240 MLIST CONFIRM
jenkins — database	A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.	2020-09-01	4	CVE-2020-2242 MLIST CONFIRM
jenkins — jenkins	Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.	2020-09-01	4	CVE-2020-2251 MLIST CONFIRM
jenkins — jsgames	Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.	2020-09-01	4.3	CVE-2020-2248 MLIST CONFIRM
jenkins — klocwork_analysis	Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	2020-09-01	4	CVE-2020-2247 MLIST CONFIRM
jenkins — parameterized_remote_trigger	Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.	2020-09-01	4	CVE-2020-2239 MLIST CONFIRM
jenkins — soapui_pro_functional_testing	Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.	2020-09-01	4	CVE-2020-2250 MLIST CONFIRM
jenkins — valgrind	Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	2020-09-01	5.5	CVE-2020-2245 MLIST CONFIRM
jitsi — meet_electron	jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.	2020-08-29	4.3	CVE-2020-25019 MISC MISC MISC
json_project — json	This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.	2020-08-30	6.5	CVE-2020-7712 MISC MISC MISC MISC MISC
kleopatra_project — kleopatra	The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.	2020-08-29	6.5	CVE-2020-24972 MISC MISC GENTOO
mara_cms_project — mara_cms	Mara CMS 7.5 allows contact.php?theme= XSS.	2020-08-30	4.3	CVE-2020-24223 MISC MISC MISC
netgear — gs716tv2_firmware	Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.	2020-08-28	4.3	CVE-2020-5621 JVN MISC MISC MISC
nitori — nitori	NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.	2020-08-28	5.8	CVE-2020-5623 MISC
o-dyn — collabtive	An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.	2020-08-31	4.3	CVE-2020-13655 MISC MISC
online_book_store_project — online_book_store	In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.	2020-08-31	5	CVE-2020-24115 MISC
os4ed — opensis	An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6136 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.	2020-09-01	6.5	CVE-2020-6130 MISC
os4ed — opensis	An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6125 MISC
os4ed — opensis	SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meet_date parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6128 MISC
os4ed — opensis	SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6132 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6133 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6134 MISC
os4ed — opensis	An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6135 MISC
os4ed — opensis	SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.	2020-09-01	6.5	CVE-2020-6126 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page CpSessionSet.php is vulnerable to SQL injection.An attacker can make an authenticated HTTP request to trigger these vulnerabilities.	2020-09-01	6.5	CVE-2020-6129 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.	2020-09-01	6.5	CVE-2020-6131 MISC
os4ed — opensis	An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6124 MISC
os4ed — opensis	SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6127 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6118 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6119 MISC
os4ed — opensis	SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6120 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6121 MISC
os4ed — opensis	SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6122 MISC
os4ed — opensis	SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6117 MISC
os4ed — opensis	An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheck.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.	2020-09-01	6.5	CVE-2020-6123 MISC
osticket — osticket	osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.	2020-08-30	4.3	CVE-2020-24917 MISC MISC MISC
pix-link — lv-wr07_firmware	XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter.	2020-08-30	4.3	CVE-2020-24104 MISC
premid — premid	managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows attackers to obtain sensitive Discord user information.	2020-08-29	5	CVE-2020-24928 MISC
rgb-rust_project — rgb-rust	A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations.	2020-08-29	6.4	CVE-2020-25016 MISC MISC
riken — xoonips	Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.	2020-08-28	4.3	CVE-2020-5625 MISC MISC MISC
schneider-electric — somove	Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.	2020-08-31	4.6	CVE-2020-7527 MISC
schneider-electric — spacelynk_firmware	Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.	2020-08-31	5	CVE-2020-7525 MISC
schneider_electric — modbus_driver_suite	Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.	2020-08-31	4.4	CVE-2020-7523 MISC
scratch-wiki — scratch_login	in Scratch Login (MediaWiki extension) before version 1.1, any account can be logged into by using the same username with leading, trailing, or repeated underscore(s), since those are treated as whitespace and trimmed by MediaWiki. This affects all users on any wiki using this extension. Since version 1.1, comments by users whose usernames would be trimmed on MediaWiki are ignored when searching for the verification code.	2020-08-28	6.4	CVE-2020-15164 MISC CONFIRM
shadan-kun — server_security_type	Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to cause a denial of service which may result in not being able to add newly detected attack source IP addresses as blocking targets for about 10 minutes via a specially crafted request.	2020-09-02	5	CVE-2020-5622 MISC MISC
sick — lms111_firmware	Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.	2020-08-31	5	CVE-2020-2075 MISC
slicedinvoices — sliced_invoices	Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.	2020-08-31	5	CVE-2020-20625 MISC
spinnaker — orca	The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.	2020-08-28	5	CVE-2020-9298 MISC
stiltsoft — table_filter_and_charts_for_confluence_server	The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the “Table from CSV” macro (URL parameter).	2020-08-29	4	CVE-2020-24898 MISC
stock_management_system_project — stock_management_system	A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.	2020-09-01	4.3	CVE-2020-23831 MISC MISC
tailor_management_system_project — tailor_management_system	A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.	2020-09-01	4.3	CVE-2020-23835 MISC
u-root — u-root	This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.	2020-09-01	5	CVE-2020-7666 CONFIRM CONFIRM
u-root — u-root	This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.	2020-09-01	5	CVE-2020-7665 MISC MISC
usvn — usvn	USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.	2020-09-01	6.8	CVE-2020-25070 MISC
xuxueli — xxl-job	Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.	2020-09-03	4.3	CVE-2020-23814 MISC MISC
zyxel — vmg5313-b30b_firmware	Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection.	2020-08-31	6.5	CVE-2020-24354 MISC MISC

Low Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
basercms — basercms	baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.	2020-08-28	2.1	CVE-2020-15154 MISC CONFIRM
basercms — basercms	baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.	2020-08-28	2.1	CVE-2020-15155 MISC MISC CONFIRM
elementor — page_builder	An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.	2020-08-31	3.5	CVE-2020-15020 MISC MISC
gigadevice — gd32f103_firmware	The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module.	2020-08-31	2.1	CVE-2020-13472 MISC
gigadevice — gd32f103_firmware	Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.	2020-08-31	2.1	CVE-2020-13470 MISC
gigadevice — gd32vf103_firmware	The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU.	2020-08-31	2.1	CVE-2020-13469 MISC
google — android	An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).	2020-08-31	2.1	CVE-2020-25048 MISC
google — android	An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software. The S Secure application does not enforce the intended password requirement for a locked application. The Samsung IDs are SVE-2020-16746, SVE-2020-16764 (August 2020).	2020-08-31	2.1	CVE-2020-25047 MISC
google — android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 (August 2020).	2020-08-31	2.1	CVE-2020-25046 MISC
ibm — infosphere_guardium	IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim’s Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials. IBM X-Force ID: 78294.	2020-09-01	3.5	CVE-2012-3341 CONFIRM XF
ibm — spectrum_protect_server	IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.	2020-08-28	1.9	CVE-2020-4591 XF CONFIRM
ibm — spectrum_scale	IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments. IBM X-Force ID: 181992.	2020-08-31	2.1	CVE-2020-4492 XF CONFIRM
jenkins — build_failure_analyzer	Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.	2020-09-01	3.5	CVE-2020-2244 MLIST CONFIRM
jenkins — cadence_vmanager	Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.	2020-09-01	3.5	CVE-2020-2243 MLIST CONFIRM
jenkins — git_parameter	Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the ‘Build with Parameters’ page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.	2020-09-01	3.5	CVE-2020-2238 MLIST CONFIRM
jenkins — team_foundation_server	Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.	2020-09-01	2.1	CVE-2020-2249 MLIST CONFIRM
jenkins — valgrind	Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.	2020-09-01	3.5	CVE-2020-2246 MLIST CONFIRM
redlion — n-tron_702-w_firmware	The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).	2020-09-01	3.5	CVE-2020-16206 MISC FULLDISC MISC
redlion — n-tron_702-w_firmware	The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions).	2020-09-01	3.5	CVE-2020-16210 MISC FULLDISC MISC
stiltsoft — table_filter_and_charts_for_confluence_server	The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the “Table from CSV” macro.	2020-08-29	3.5	CVE-2020-24897 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.	2020-09-03	3.5	CVE-2020-25117 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.	2020-09-03	3.5	CVE-2020-25118 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.	2020-09-03	3.5	CVE-2020-25115 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.	2020-09-03	3.5	CVE-2020-25124 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager.	2020-09-03	3.5	CVE-2020-25123 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.	2020-09-03	3.5	CVE-2020-25122 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.	2020-09-03	3.5	CVE-2020-25116 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.	2020-09-03	3.5	CVE-2020-25120 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.	2020-09-03	3.5	CVE-2020-25119 MISC
vbulletin — vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.	2020-09-03	3.5	CVE-2020-25121 MISC

Severity Not Yet Assigned

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
accusoft — imagegear	A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability.	2020-09-01	not yet calculated	CVE-2020-6151 MISC
accusoft — imagegear	A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file.	2020-09-01	not yet calculated	CVE-2020-6152 MISC
add-apt-repository — add-apt-repository	Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways.	2020-09-05	not yet calculated	CVE-2020-15709 MISC
apache — cassandra	In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.	2020-09-01	not yet calculated	CVE-2020-13946 MLIST MLIST MISC
apex_microelectronics — apm32f103_devices	Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.	2020-08-31	not yet calculated	CVE-2020-13471 MISC
apex_microelectronics — apm32f103_devices	The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.	2020-08-31	not yet calculated	CVE-2020-13463 MISC
aruba — clearpass	A vulnerability exists in the Aruba ClearPass C1000 S-1200 R4 HW-Based Appliance Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.	2020-09-04	not yet calculated	CVE-2020-7119 MISC
atlassian — jira_server_and_data_center	Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.	2020-09-01	not yet calculated	CVE-2020-14178 MISC
beijing_qihoo_technology — 360_speed_browser	360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology.	2020-09-03	not yet calculated	CVE-2020-24158 MISC
best_support_system — best_support_system	An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.	2020-09-04	not yet calculated	CVE-2020-24963 MISC MISC
bestzip — bestzip	The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.	2020-09-04	not yet calculated	CVE-2020-7730 MISC MISC
bundler — bundler	Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user’s home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.	2020-09-04	not yet calculated	CVE-2019-3881 MISC
canonical — ubuntu	The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504.	2020-09-01	not yet calculated	CVE-2020-15704 UBUNTU UBUNTU
china_key_systems_&_integrated_circuit — cks32f103_devices	The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.	2020-08-31	not yet calculated	CVE-2020-13464 MISC
china_key_systems_&_integrated_circuit — cks32f103_devices	The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.	2020-08-31	not yet calculated	CVE-2020-13467 MISC
cisco — asyncos_and_email_security_appliance	A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface of an affected device. A successful exploit could allow the attacker to obtain the IP addresses that are configured on the internal interfaces of the affected device. There is a workaround that addresses this vulnerability.	2020-09-04	not yet calculated	CVE-2020-3546 CISCO
cisco — enterprise_nfv_infrastructure_software	A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.	2020-09-04	not yet calculated	CVE-2020-3478 CISCO
cisco — enterprise_nfv_infrastructure_software	A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. The vulnerability is due to a flaw in the logic that governs directory permissions. An attacker could exploit this vulnerability by using capabilities that are not controlled by the role-based access control (RBAC) mechanisms of the software. A successful exploit could allow the attacker to overwrite files on an affected device.	2020-09-04	not yet calculated	CVE-2020-3365 CISCO
cisco — fxos_software	A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this vulnerability by supplying a crafted file that, when it is processed, may cause a stack-based buffer overflow. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges. An attacker would need to have valid administrative credentials to exploit this vulnerability.	2020-09-04	not yet calculated	CVE-2020-3545 CISCO
cisco — ios_xr_software	A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks.	2020-09-04	not yet calculated	CVE-2020-3473 CISCO
cisco — ios_xr_software	A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The vulnerability is due to incorrect mapping in the source code of task group assignments for a specific command. An attacker could exploit this vulnerability by issuing the command, which they should not be authorized to issue, on an affected device. A successful exploit could allow the attacker to invalidate the integrity of the disk and cause the device to restart. This vulnerability could allow a user with read permissions to issue a specific command that should require Administrator privileges.	2020-09-04	not yet calculated	CVE-2020-3530 CISCO
cisco — jabber	A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages to a targeted system. A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, possibly for use in further attacks.	2020-09-04	not yet calculated	CVE-2020-3498 CISCO
cisco — jabber_for_windows	A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages that contain Universal Naming Convention (UNC) links to a targeted user and convincing the user to follow the provided link. A successful exploit could allow the attacker to cause the application to access a remote system, possibly allowing the attacker to gain access to sensitive information that the attacker could use in additional attacks.	2020-09-04	not yet calculated	CVE-2020-3537 CISCO
cisco — jabber_for_windows	A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.	2020-09-04	not yet calculated	CVE-2020-3495 CISCO
cisco — jabber_for_windows	A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this vulnerability by convincing a user to click a link within a message sent by email or other messaging platform. A successful exploit could allow the attacker to execute arbitrary commands on a targeted system with the privileges of the user account that is running the Cisco Jabber client software.	2020-09-04	not yet calculated	CVE-2020-3430 CISCO
cisco — multiple_products	A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe logging of authentication requests by the affected software. An attacker could exploit this vulnerability by reading log files that are stored in the application directory. A successful exploit could allow the attacker to gain access to sensitive information, which could be used in further attacks.	2020-09-04	not yet calculated	CVE-2020-3541 CISCO
cisco — multiple_products	A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because an insecure method is used to mask certain passwords on the web-based management interface. An attacker could exploit this vulnerability by looking at the raw HTML code that is received from the interface. A successful exploit could allow the attacker to obtain some of the passwords configured throughout the interface.	2020-09-04	not yet calculated	CVE-2020-3547 CISCO
cisco — small_business_rv340_series_routers	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.	2020-09-04	not yet calculated	CVE-2020-3451 CISCO
cisco — small_business_rv340_series_routers	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.	2020-09-04	not yet calculated	CVE-2020-3453 CISCO
cisco — webex_training	A vulnerability in Cisco Webex Training could allow an authenticated, remote attacker to join a password-protected meeting without providing the meeting password. The vulnerability is due to improper validation of input to API requests that are a part of meeting join flow. An attacker could exploit this vulnerability by sending an API request to the application, which would return a URL that includes a meeting join page that is prepopulated with the meeting username and password. A successful exploit could allow the attacker to join the password-protected meeting. The attacker would be visible in the attendee list of the meeting.	2020-09-04	not yet calculated	CVE-2020-3542 CISCO
cloud_foundry — capi	Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the “cloud_controller.read” scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).	2020-09-03	not yet calculated	CVE-2020-5418 CONFIRM
cloud_foundry — routing	Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with “cf push” access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.	2020-09-03	not yet calculated	CVE-2020-5420 CONFIRM
concrete5 — concrete5	Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.	2020-09-04	not yet calculated	CVE-2020-24986 MISC
d-link — dcs-2530l_and_dcs-2670l_devices	An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.	2020-09-02	not yet calculated	CVE-2020-25079 MISC MISC
d-link — dcs-2530l_and_dcs-2670l_devices	An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.	2020-09-02	not yet calculated	CVE-2020-25078 MISC MISC
dell — emc_ecs	Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.	2020-09-02	not yet calculated	CVE-2020-5386 MISC
dell — emc_isilon_onefs	Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files.	2020-09-02	not yet calculated	CVE-2020-5369 MISC
dell — g7_17_7790_bios	Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).	2020-09-02	not yet calculated	CVE-2020-5378 MISC
dell — inspiron_7347_bios	Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).	2020-09-02	not yet calculated	CVE-2020-5376 MISC
dell — inspiron_7352_bios	Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).	2020-09-02	not yet calculated	CVE-2020-5379 MISC
django — django	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.	2020-09-01	not yet calculated	CVE-2020-24583 MISC MISC MISC UBUNTU MISC MISC
django — django	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system’s standard umask rather than 0o077.	2020-09-01	not yet calculated	CVE-2020-24584 MISC MISC MISC UBUNTU MISC MISC
dolibarr — dolibarr	Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism).	2020-09-02	not yet calculated	CVE-2020-14209 CONFIRM MISC
dolibarr — dolibarr	Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or address parameter; product/card.php with the label or customcode parameter; or societe/card.php with the alias or barcode parameter.	2020-08-31	not yet calculated	CVE-2020-13828 MISC
duffel — paginator	There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the paginate() function. This will potentially affect all current users of Paginator prior to version 1.0.0. The vulnerability has been patched in version 1.0.0 and all users should upgrade to this version immediately. Note that this patched version uses a dependency that requires an Elixir version >=1.5.	2020-09-01	not yet calculated	CVE-2020-15150 CONFIRM CONFIRM CONFIRM CONFIRM
enghouse — web_chat	Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951.	2020-09-03	not yet calculated	CVE-2020-13972 MISC
eramba — eramba_and_eramba_enterprise	eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.	2020-09-03	not yet calculated	CVE-2020-25104 MISC MISC
eramba — eramba_and_eramba_enterprise	eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).	2020-09-03	not yet calculated	CVE-2020-25105 MISC MISC
erlang — rebar3	Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.	2020-09-02	not yet calculated	CVE-2020-13802 MISC MISC MISC
espressif — esp32_devices	The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.	2020-08-31	not yet calculated	CVE-2020-13594 MISC MISC MISC
espressif — esp32_devices	The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can silently trigger the assertion (which disables the target’s BLE stack) by sending a crafted sequence of BLE packets.	2020-08-31	not yet calculated	CVE-2020-13595 MISC MISC MISC
facebook — hermes	A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.	2020-09-04	not yet calculated	CVE-2020-1911 CONFIRM CONFIRM
forlogic — qualiex	ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.	2020-09-02	not yet calculated	CVE-2020-24028 MISC MISC MISC
forlogic — qualiex	Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.	2020-09-02	not yet calculated	CVE-2020-24029 MISC MISC
forlogic — qualiex	ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse.	2020-09-02	not yet calculated	CVE-2020-24030 MISC MISC
foxit — reader_and_phantompdf	In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur.	2020-09-04	not yet calculated	CVE-2020-12247 MISC
foxit — reader_and_phantompdf	In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.	2020-09-04	not yet calculated	CVE-2020-12248 MISC
foxit — reader_and_phantompdf	In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.	2020-09-04	not yet calculated	CVE-2020-11493 MISC
freedombox — freedombox	FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service (or from PageKite) is considered a local connection. This affects both the freedombox and plinth packages of some Linux distributions, but only if the Apache mod_status module is enabled.	2020-09-02	not yet calculated	CVE-2020-25073 MISC
ghostscript — ghostscript	A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.	2020-09-03	not yet calculated	CVE-2020-14373 MISC MISC MISC
gmapfp — gmapfp	gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.	2020-09-01	not yet calculated	CVE-2020-23971 MISC
gnome_project — libxml2	GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).	2020-09-04	not yet calculated	CVE-2020-24977 MISC
gnu — bison	An assertion failure was found in src/parse-gram.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file containing character ” at the end and while still in a character or a string.	2020-09-04	not yet calculated	CVE-2020-24980 MISC MISC
gnu — bison	A Buffer Overflow vulnerability was found in src/symtab.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file redefining the EOF token, which could triggers Heap buffer overflow and thus cause system crash.	2020-09-04	not yet calculated	CVE-2020-24979 MISC MISC
gnupg — gnupg	GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker’s OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.	2020-09-03	not yet calculated	CVE-2020-25125 MLIST MLIST MISC MISC MISC MISC
gnutls — gnutls	An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application’s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.	2020-09-04	not yet calculated	CVE-2020-24659 MISC GENTOO MISC
grunt — grunt	The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.	2020-09-03	not yet calculated	CVE-2020-7729 CONFIRM CONFIRM CONFIRM CONFIRM
guangzhou_netease_computer_system — netease_mail_master	Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.	2020-09-03	not yet calculated	CVE-2020-24161 MISC
guangzhou_netease_computer_system — netease_youdao_dictionary	NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0.	2020-09-03	not yet calculated	CVE-2020-24159 MISC
huawei — honor_20_pro_smartphones	Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.	2020-09-03	not yet calculated	CVE-2020-9235 MISC
huawei — mate_20_smartphones	HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service.	2020-09-03	not yet calculated	CVE-2020-9083 MISC
huawei — multiple_products	B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.	2020-09-03	not yet calculated	CVE-2020-9199 MISC
ibm — api_connect	IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.	2020-09-03	not yet calculated	CVE-2020-4337 XF CONFIRM
ibm — api_manager	IBM API Connect’s API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.	2020-09-03	not yet calculated	CVE-2020-4638 XF CONFIRM
ibm — aspera_connect	IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190.	2020-09-04	not yet calculated	CVE-2020-4545 XF CONFIRM
ibm — infosphere_information_server	IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187187.	2020-09-04	not yet calculated	CVE-2020-4702 XF CONFIRM
ibm — infosphere_metadata_asset_manager	IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.	2020-09-04	not yet calculated	CVE-2020-4632 XF CONFIRM
ibm — jazz_team_server	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.	2020-09-02	not yet calculated	CVE-2020-4522 XF CONFIRM
ibm — jazz_team_server	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.	2020-09-02	not yet calculated	CVE-2020-4445 XF CONFIRM
ibm — jazz_team_server	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.	2020-09-02	not yet calculated	CVE-2020-4546 XF CONFIRM
ibm — spectrum_protect_operations_center	IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.	2020-09-02	not yet calculated	CVE-2020-4693 XF CONFIRM
ignite_realtime — openfire	Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName”, “searchValue”, “searchDescription”, “searchDefaultValue”,”searchPlugin”, “searchDescription” and “searchDynamic” in the Server Properties and Security Audit Viewer JSP page	2020-09-02	not yet calculated	CVE-2020-24602 MISC
ignite_realtime — openfire	In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName”, “alias” in the import certificate trusted page	2020-09-02	not yet calculated	CVE-2020-24601 MISC
ignite_realtime — openfire	A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request “searchName”, “searchValue”, “searchDescription”, “searchDefaultValue”,”searchPlugin”, “searchDescription” and “searchDynamic” in server-properties.jsp and security-audit-viewer.jsp	2020-09-02	not yet calculated	CVE-2020-24604 MISC
kaspersky — security_center_and_security_center_web_console	Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.	2020-09-02	not yet calculated	CVE-2020-25045 MISC
kaspersky — virus_removal_tool	Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system.	2020-09-02	not yet calculated	CVE-2020-25044 MISC
kaspersky — vpn_secure_connection	The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system.	2020-09-02	not yet calculated	CVE-2020-25043 MISC
kde — ark	In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user’s home directory.	2020-09-02	not yet calculated	CVE-2020-24654 SUSE CONFIRM CONFIRM CONFIRM DEBIAN
laravel — laravel	An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.	2020-09-04	not yet calculated	CVE-2020-24940 MISC
laravel — laravel	An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.	2020-09-04	not yet calculated	CVE-2020-24941 MISC
lenovo — multiple_thinkpad_devices	In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.	2020-09-01	not yet calculated	CVE-2020-8341 MISC
lenovo — thinkpad_a285_devices	The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.	2020-09-01	not yet calculated	CVE-2020-8335 MISC
librehealth — ehr	interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.	2020-09-01	not yet calculated	CVE-2020-23829 MISC MISC
liferay — liferay_portal	The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.	2020-09-01	not yet calculated	CVE-2020-24554 MISC CONFIRM
linux — linux_kernel	A flaw was found in the Linux kernel’s implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.	2020-09-03	not yet calculated	CVE-2020-10720 MISC MISC
magmi — magmi	MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting max_connections (default 151) is lower than Apache (or another web server) setting MaxRequestWorkers (formerly MaxClients) (default 256). This can be done by sending at least 151 simultaneous requests to the Magento website to trigger a “Too many connections” error, then use default magmi:magmi basic authentication to remotely bypass authentication.	2020-09-01	not yet calculated	CVE-2020-5777 MISC
magmi — magmi	Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.	2020-09-01	not yet calculated	CVE-2020-5776 MISC
mara_cms — mara_cms	An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.	2020-09-03	not yet calculated	CVE-2020-25042 MISC MISC
mcafee — true_key	Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.	2020-09-04	not yet calculated	CVE-2020-7299 CONFIRM
midnightbsd_and_freebsd — midnightbsd_and_freebsd	A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.	2020-09-03	not yet calculated	CVE-2020-24863 CONFIRM MISC CONFIRM MISC
midnightbsd_and_freebsd — midnightbsd_and_freebsd	In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the running kernel. During binary interaction, td->td_emuldata in sys/compat/linux/linux_emul.h is not getting initialized and returns NULL from em_find().	2020-09-03	not yet calculated	CVE-2020-24385 CONFIRM MISC
milller — miller	In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary code by placing a malicious `.mlrrc` file in the working directory. See linked GitHub Security Advisory for complete details. A fix is ready and will be released as Miller 5.9.1.	2020-09-02	not yet calculated	CVE-2020-15167 CONFIRM
modicon — m218_logic_controller	Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.	2020-08-31	not yet calculated	CVE-2020-7524 MISC
multiple_vendors — multiple_products	All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements.	2020-09-01	not yet calculated	CVE-2020-14514 MISC
multiux — multiux	A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field.	2020-09-02	not yet calculated	CVE-2020-17458 MISC MISC
nasm — nasm	In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.	2020-09-04	not yet calculated	CVE-2020-24978 MISC
netapp — clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.	2020-09-02	not yet calculated	CVE-2020-8576 MISC
netgear — r8300_devices	NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.	2020-09-01	not yet calculated	CVE-2020-25067 MISC
noise-java — noise-java	An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access.	2020-09-04	not yet calculated	CVE-2020-25022 MISC FULLDISC MISC CONFIRM
noise-java — noise-java	An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access.	2020-09-04	not yet calculated	CVE-2020-25023 MISC FULLDISC MISC CONFIRM
noise-java — noise-java	An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access.	2020-09-04	not yet calculated	CVE-2020-25021 MISC FULLDISC MISC CONFIRM
open-xchange — ox_app_suite	OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.	2020-08-31	not yet calculated	CVE-2020-12646 MISC
open-xchange — ox_app_suite	OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.	2020-08-31	not yet calculated	CVE-2020-12643 FULLDISC MISC
open-xchange — ox_app_suite	OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.	2020-08-31	not yet calculated	CVE-2020-12644 MISC MISC
open-xchange — ox_app_suite	OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.	2020-08-31	not yet calculated	CVE-2020-12645 MISC MISC
openfind — mail2000	Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.	2020-09-01	not yet calculated	CVE-2020-12776 CONFIRM
oscommerce — ce_phoenix	Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/order_status.php, catalog/admin/tax_rates.php, catalog/admin/languages.php, catalog/admin/countries.php, catalog/admin/tax_classes.php, catalog/admin/reviews.php, or catalog/admin/zones.php; or the zpage or spage parameter to catalog/admin/geo_zones.php.	2020-09-03	not yet calculated	CVE-2020-12058 MISC MISC MISC
oswapp — warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin’s password after an authenticated admin visits a third-party site.	2020-09-01	not yet calculated	CVE-2020-23836 MISC MISC
pancake — pancake	Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.	2020-09-03	not yet calculated	CVE-2020-24876 MISC
php-fusion — php-fusion	Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).	2020-09-03	not yet calculated	CVE-2020-24949 MISC
phpkb — phpkb	An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.	2020-09-03	not yet calculated	CVE-2020-11579 MISC MISC MISC MISC
project_acrn — acrn	Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and Denial of Service (DoS) for previously assigned PCIe devices to the Service VM at runtime.	2020-08-31	not yet calculated	CVE-2020-15687 MISC MISC MISC
python_packaging_authority — python_package_index	The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.	2020-09-04	not yet calculated	CVE-2019-20916 MISC MISC MISC
qemu — qemu	In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.	2020-08-31	not yet calculated	CVE-2020-12829 MISC UBUNTU
raonwiz — roan_kupload	RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.	2020-09-02	not yet calculated	CVE-2020-7830 MISC
rapid7 — metasploit	By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.	2020-09-01	not yet calculated	CVE-2019-5645 MISC
rapid7 — nexpose	Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.	2020-09-03	not yet calculated	CVE-2020-7382 CONFIRM
rapid7 — nexpose	In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Security Console installation and any arbitrary code executable using the same file name.	2020-09-03	not yet calculated	CVE-2020-7381 CONFIRM
razer_chroma — sdk_rest_server	Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under “%PROGRAMDATA%Razer ChromaSDKApps” can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.	2020-09-02	not yet calculated	CVE-2020-16602 MISC MISC MISC
real_time_logic — barracudadrive	Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%bdbd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.	2020-09-04	not yet calculated	CVE-2020-23834 MISC MISC
red_lion — n-tron_702-w_and_n-tron_702m12-w_devices	The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions).	2020-09-01	not yet calculated	CVE-2020-16208 MISC FULLDISC MISC
sagemcom — f@st_5280_routers	Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise.	2020-09-01	not yet calculated	CVE-2020-24034 MISC FULLDISC MISC MISC
samsung — multiple_mobile_devices	An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 (August 2020).	2020-08-31	not yet calculated	CVE-2020-25054 MISC
senstar — symphony	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSOAuth process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10980.	2020-09-01	not yet calculated	CVE-2020-17405 N/A
setelsa — conacwin	Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/file_to_disclose Directory Traversal URI.	2020-09-03	not yet calculated	CVE-2020-25068 MISC MISC MISC
shenzhen_tencent_computer_system — tencent_app_pc	The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.	2020-09-03	not yet calculated	CVE-2020-24162 MISC
shenzhen_tencent_computer_system — tim_windows_client	Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code.	2020-09-03	not yet calculated	CVE-2020-24160 MISC
silverstripe-advancereports — silverstripe-advancereports	silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.	2020-09-03	not yet calculated	CVE-2020-25102 MISC MISC
sourcecodester — daily_tracker_system	A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.	2020-09-03	not yet calculated	CVE-2020-24193 MISC MISC
sourcecodester — stock_management_system	A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim’s username when they visit a third-party site.	2020-09-02	not yet calculated	CVE-2020-23830 MISC MISC
spiceworks — spiceworks	Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.	2020-09-01	not yet calculated	CVE-2020-23450 MISC MISC MISC
squid — squid	An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local security and poison the browser cache and any downstream caches with content from an arbitrary source. Squid uses a string search instead of parsing the Transfer-Encoding header to find chunked encoding. This allows an attacker to hide a second request inside Transfer-Encoding: it is interpreted by Squid as chunked and split out into a second request delivered upstream. Squid will then deliver two distinct responses to the client, corrupting any downstream caches.	2020-09-02	not yet calculated	CVE-2020-15811 SUSE MISC FEDORA FEDORA UBUNTU DEBIAN
squid — squid	An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local security and poison the proxy cache and any downstream caches with content from an arbitrary source. When configured for relaxed header parsing (the default), Squid relays headers containing whitespace characters to upstream servers. When this occurs as a prefix to a Content-Length header, the frame length specified will be ignored by Squid (allowing for a conflicting length to be used from another Content-Length header) but relayed upstream.	2020-09-02	not yet calculated	CVE-2020-15810 SUSE MISC FEDORA FEDORA UBUNTU DEBIAN
stmicroelectronics — stm32f103_devices	STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.	2020-08-31	not yet calculated	CVE-2020-13466 MISC
superantispyware — professional_x_trail	SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.	2020-09-01	not yet calculated	CVE-2020-24955 MISC MISC
suse — multiple_products	A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.	2020-09-01	not yet calculated	CVE-2020-8023 CONFIRM
suse — opensuse_open_build_service	A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .	2020-09-01	not yet calculated	CVE-2018-12475 CONFIRM
symfony — symfony	In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class was initially written with surrogate caching and ESI support in mind (all HTTP calls come from a trusted backend in that scenario). But when used by CachingHttpClient and if an attacker can control the response for a request being made by the CachingHttpClient, remote code execution is possible. This has been fixed in versions 4.4.13 and 5.1.5.	2020-09-02	not yet calculated	CVE-2020-15094 MISC CONFIRM MISC MISC
teamwire — teamwire	The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component.	2020-09-02	not yet calculated	CVE-2020-12621 MISC MISC
tenda — ac18_router	Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to “radius”.	2020-09-04	not yet calculated	CVE-2020-24987 MISC MISC
texas_instruments — simplelink-cc2640r2-sdk	The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radio range can achieve arbitrary read/write access to protected GATT service data, cause a denial of service, or possibly control a device’s function by establishing an encrypted session with an unauthenticated Long Term Key (LTK).	2020-08-31	not yet calculated	CVE-2020-13593 MISC MISC MISC
thomson_and_philips — tht741fta_and_dtr3502bfta_dvb-t2_devices	THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the TELNET protocol.	2020-08-31	not yet calculated	CVE-2020-11618 MISC
thomson_and_philips — tht741fta_and_dtr3502bfta_dvb-t2_devices	The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn’t validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client.	2020-08-31	not yet calculated	CVE-2020-11617 MISC
thomson_reuters — eikon	Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%Thomson ReutersEikon permissions.	2020-09-03	not yet calculated	CVE-2019-10679 MISC FULLDISC MISC MISC MISC
tp-link — tl-wa855re_v5_devices	TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.	2020-08-31	not yet calculated	CVE-2020-24363 MISC MISC MISC
trading_technologies_messaging — trading_technologies_messaging	A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It’s been observed that ttmd.exe terminates as a result.	2020-09-02	not yet calculated	CVE-2020-5779 MISC
trading_technologies_messaging — trading_technologies_messaging	A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate ttmd.exe.	2020-09-02	not yet calculated	CVE-2020-5778 MISC
trend_micro — apex_one	A vulnerability in an Trend Micro Apex One dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.	2020-09-01	not yet calculated	CVE-2020-24558 MISC MISC
trend_micro — apex_one_and_officescan_xg_sp1	A vulnerability in Trend Micro Apex One and OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.	2020-09-01	not yet calculated	CVE-2020-24556 MISC MISC MISC
trend_micro — apex_one_on_macos	A vulnerability in Trend Micro Apex One on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.	2020-09-01	not yet calculated	CVE-2020-24559 MISC MISC
trend_micro — apex_one_on_microsoft_windows	A vulnerability in Trend Micro Apex One on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.	2020-09-01	not yet calculated	CVE-2020-24557 MISC MISC
trusted_firmware — mbed_tls	A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.	2020-09-02	not yet calculated	CVE-2020-16150 MISC CONFIRM
typo3 — typo3	The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).	2020-09-02	not yet calculated	CVE-2020-25025 MISC CONFIRM
typo3 — typo3	The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.	2020-09-02	not yet calculated	CVE-2020-25026 MISC CONFIRM
u-root — u-root	This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.	2020-09-01	not yet calculated	CVE-2020-7669 CONFIRM CONFIRM
ucms — ucms	An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.	2020-09-04	not yet calculated	CVE-2020-24981 MISC
vmware — rabbitmq	RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.	2020-08-31	not yet calculated	CVE-2020-5419 CONFIRM
whatsapp — multiple_products	A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.	2020-09-03	not yet calculated	CVE-2020-1891 CONFIRM
whatsapp — multiple_products	A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.	2020-09-03	not yet calculated	CVE-2020-1894 CONFIRM
whatsapp — whatsapp_desktop	An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.	2020-09-03	not yet calculated	CVE-2019-11928 CONFIRM
whatsapp — whatsapp_desktop	A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.	2020-09-03	not yet calculated	CVE-2020-1889 CONFIRM
whatsapp — whatsapp_for_android_and_whatsapp_business_for_android	A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.	2020-09-03	not yet calculated	CVE-2020-1890 CONFIRM
whatsapp — whatsapp_for_android_and_whatsapp_business_for_android	A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.	2020-09-03	not yet calculated	CVE-2020-1886 CONFIRM
wordpress — wordpress	lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS.	2020-08-31	not yet calculated	CVE-2020-20626 MISC
wordpress — wordpress	The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.	2020-08-31	not yet calculated	CVE-2020-20627 MISC
wordpress — wordpress	The ao_ccss_import AJAX call in Autoptimize WordPress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PHP, leading to remote command execution.	2020-09-03	not yet calculated	CVE-2020-24948 MISC
xpdf — xpdf	There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2020-09-03	not yet calculated	CVE-2020-24999 MISC
xpdf — xpdf	There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2020-09-03	not yet calculated	CVE-2020-24996 MISC
xxl-job — xxl-job	xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.	2020-09-03	not yet calculated	CVE-2020-23811 MISC
zoho — manageengine_applications_manager	Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.	2020-09-04	not yet calculated	CVE-2020-14008 MISC MISC MISC
zoho — manageengine_exchange_reporter_plus	An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number 12136, ADAudit Plus before build number 6052, O365 Manager Plus before build number 4334, Cloud Security Plus before build number 4110, ADManager Plus before build number 7055, and Log360 before build number 5166. The remotely accessible Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails is prone to an authentication bypass. System integration properties can be modified and lead to full ManageEngine suite compromise.	2020-08-31	not yet calculated	CVE-2020-24786 MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC
zte — zxiptv_and_zxiptv-web-pv	A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04.	2020-09-01	not yet calculated	CVE-2020-6874 MISC
zte — zxr1-_2800-4_almpufb(low)	A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40.	2020-09-01	not yet calculated	CVE-2020-6873 MISC
zyxel — vmg5313-b30b_router	Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing “FirstIndex” field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.	2020-09-02	not yet calculated	CVE-2020-24355 MISC MISC MISC

This product is provided subject to this Notification and this Privacy & Use policy.

Securing Your Data

High Vulnerabilities

Medium Vulnerabilities

Low Vulnerabilities

Severity Not Yet Assigned

Leave a Reply Cancel Reply

RebootTwice LLC

Helping Your Business Securely Build Success