CVEs published August 5, 2020
26 CVEs were published on August 5, 2020: 0 critical, 3 high.
- Published
- 26
- Critical
- 0
- High
- 3
- Medium
- 6
- Low
- 1
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- etcd-io etcd · go.etcd.io/etcd +1
- 2
- Yokogawa Electric CAMS for HIS
- 2
- Apache SkyWalking · apache-skywalking +1
- 1
- Atlassian Fisheye
- 1
- chartkick
- 1
- etcd-io etcd · github.com/etcd-io/etcd
- 1
- field_test
- 1
- IBM Security Identity Governance and Intelligence
- 1
- IBM UrbanCode Deploy
- 1
- McAfee Total Protection
- 1
High 3
- CVE-2020-7298Total Protection (MTP) - Unexpected behavior violationMcAfee Total Protection
- CVE-2020-15127Denial of service in Contourprojectcontour contour
- CVE-2020-4481IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when procesIBM UrbanCode Deploy
Medium, low and unrated 23
- CVE-2020-9036Jeedom through 4.0.38 allows XSS.
- CVE-2020-17366An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1.
- CVE-2020-13404The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection.
- CVE-2020-15132Reset Password / Login vulnerability in Sulusulu · sulu/sulu
- CVE-2020-15112Improper Input Validation in etcdetcd-io etcd · go.etcd.io/etcd +1
- CVE-2020-16254The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).chartkick
- CVE-2020-15113Improper Preservation of Permissions in etcdetcd-io etcd · github.com/etcd-io/etcd
- CVE-2020-15106Improper Input Validation in etcdetcd-io etcd · go.etcd.io/etcd +1
- CVE-2020-16192LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters.
- CVE-2020-17364USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
- CVE-2020-8607An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driTrend Micro Apex One · Trend Micro OfficeScan +9
- CVE-2020-16253The PgHero gem through 2.6.0 for Ruby allows CSRF.pghero
- CVE-2020-16252The Field Test gem 0.2.0 through 0.3.2 for Ruby allows CSRF.field_test
- CVE-2020-13819Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.
- CVE-2020-13921**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.Apache SkyWalking · apache-skywalking +1
- CVE-2020-4243IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information usinIBM Security Identity Governance and Intelligence
- CVE-2020-5608CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6Yokogawa Electric CAMS for HIS
- CVE-2020-5609Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CYokogawa Electric CAMS for HIS
- CVE-2020-14347A flaw was found in the way xserver memory was not properly initialized.The Xorg Project xorg-x11-server
- CVE-2020-14344An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version The X11 Project libX11
- CVE-2020-17353scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-p
- CVE-2020-13151Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as
- CVE-2017-18112Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Information Disclosure vulnerAtlassian Fisheye