CVEs published August 4, 2020
27 CVEs were published on August 4, 2020: 0 critical, 3 high.
- Published
- 27
- Critical
- 0
- High
- 3
- Medium
- 8
- Low
- 1
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IBM Rational Rhapsody Design Manager
- 4
- Delta Industrial Automation CNCSoft ScreenEditor
- 3
- HumanTalk Co DaviewIndy
- 2
- SoftPerfect
- 2
- IBM Security Secret Server
- 1
- IBM Spectrum Protect Plus
- 1
- Neztore save-server · save-server
- 1
- PHP Factory [Calendar01] and [Calendar02]
- 1
- PHP Factory [Calendar01], [Calendar02], [PKOBO-News01], [PK…
- 1
- Sky Co. SKYSEA Client View
- 1
High 3
Medium, low and unrated 24
- CVE-2020-15109Ability to change order address without triggering address validations in solidussolidusio solidus · solidus_frontend +1
- CVE-2020-15135CSRF vulnerability in save-serverNeztore save-server · save-server
- CVE-2020-16847Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka C
- CVE-2020-16843In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic.
- CVE-2020-15943An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira.
- CVE-2020-15956ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and applic
- CVE-2020-15944An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira.
- CVE-2020-13523An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver.SoftPerfect
- CVE-2020-16199Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior.Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2020-16201Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior.Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2020-16203Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior.Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2020-16134An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.0
- CVE-2020-4631IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with IBM Spectrum Protect Plus
- CVE-2020-4542IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.IBM Rational Rhapsody Design Manager
- CVE-2020-4525IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.IBM Rational Rhapsody Design Manager
- CVE-2020-4459IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound IBM Security Secret Server
- CVE-2020-4410IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attaIBM Rational Rhapsody Design Manager
- CVE-2020-4396IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.IBM Rational Rhapsody Design Manager
- CVE-2020-6012ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges.ZoneAlarm Anti-Ransomware
- CVE-2020-15467The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execu
- CVE-2019-20001An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privile
- CVE-2020-5616[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free editionPHP Factory [Calendar01], [Calendar02], [PKOBO-News01], [PK…
- CVE-2020-5617Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges aSky Co. SKYSEA Client View
- CVE-2020-5615Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote aPHP Factory [Calendar01] and [Calendar02]