CVEs published August 3, 2020
32 CVEs were published on August 3, 2020: 0 critical, 9 high.
- Published
- 32
- Critical
- 0
- High
- 9
- Medium
- 3
- Low
- 1
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM i2 Analyst Notebook
- 6
- Teltonika Gateway TRB245
- 4
- IBM Cognos Analytics
- 3
- IBM Financial Transaction Manager
- 2
- Active IQ Unified Manager for Linux 7.3 and above
- 1
- Active IQ Unified Manager for VMware vSphere and Windows 7.…
- 1
- AMQ-Online and EnMasse
- 1
- Bitdefender Endpoint Security for Mac
- 1
- IBM WebSphere Application Server
- 1
High 9
- CVE-2020-4554IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4553IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4552IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4551IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4550IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4549IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.IBM i2 Analyst Notebook
- CVE-2020-4534IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the systemIBM WebSphere Application Server
- CVE-2020-4377IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.IBM Cognos Analytics
- CVE-2020-8108Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759)Bitdefender Endpoint Security for Mac
Medium, low and unrated 23
- CVE-2020-11583A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML,
- CVE-2020-11584A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or C
- CVE-2020-5771Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploadTeltonika Gateway TRB245
- CVE-2020-5770Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to perform sensitive application actions by triTeltonika Gateway TRB245
- CVE-2020-5773Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations.Teltonika Gateway TRB245
- CVE-2020-5772Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploadTeltonika Gateway TRB245
- CVE-2020-16116In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory trav
- CVE-2020-8574Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) serviceActive IQ Unified Manager for Linux 7.3 and above
- CVE-2020-8575Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrativActive IQ Unified Manager for VMware vSphere and Windows 7.…
- CVE-2020-16131Tiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter/PreventXss.php.
- CVE-2020-14319It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight AMQ-Online and EnMasse
- CVE-2020-12739A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause
- CVE-2020-13820Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.
- CVE-2020-16271The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to re
- CVE-2020-16272The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote a
- CVE-2020-16269radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed
- CVE-2015-9549A reflected Cross-site Scripting (XSS) vulnerability exists in OcPortal 9.0.20 via the OCF_EMOTICON_CELL.tpl FIELD_NAME field to data/emotic
- CVE-2019-19455Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / Wowz
- CVE-2019-19453Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2).
- CVE-2020-4560IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting.IBM Financial Transaction Manager
- CVE-2020-4328IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection.IBM Financial Transaction Manager
- CVE-2019-4589IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accesIBM Cognos Analytics
- CVE-2019-4366IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached bIBM Cognos Analytics