CVEs published August 6, 2020
29 CVEs were published on August 6, 2020: 3 critical, 4 high.
- Published
- 29
- Critical
- 3
- High
- 4
- Medium
- 6
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Advantech WebAccess HMI Designer
- 6
- Delta Electronics TPEditor
- 5
- Canonical apport
- 2
- etcd-io etcd · go.etcd.io/etcd
- 2
- FreeBSD
- 2
- ActiveSoft MyBrowserPlus
- 1
- Canonical whoopsie
- 1
- Cayin Technology Cayin CMS-SE · Cayin Technology Cayin C… +3
- 1
- Cayin Technology Cayin xPost
- 1
- EasyCorp ZenTao Pro
- 1
Critical 3
High 4
- CVE-2020-15702TOCTOU in apportCanonical apport
- CVE-2020-15114Denial of Service in etcdetcd-io etcd · go.etcd.io/etcd
- CVE-2020-13365Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account
- CVE-2020-7352GOG Galaxy GalaxyClientService Privilege EscalationGOG GalaxyClientService
Medium, low and unrated 22
- CVE-2020-16225Delta Electronics TPEditor Versions 1.97 and prior.Delta Electronics TPEditor
- CVE-2020-16227Delta Electronics TPEditor Versions 1.97 and prior.Delta Electronics TPEditor
- CVE-2020-16221Delta Electronics TPEditor Versions 1.97 and prior.Delta Electronics TPEditor
- CVE-2020-16223Delta Electronics TPEditor Versions 1.97 and prior.Delta Electronics TPEditor
- CVE-2020-16219Delta Electronics TPEditor Versions 1.97 and prior.Delta Electronics TPEditor
- CVE-2020-15701Unhandled exception in apportCanonical apport
- CVE-2020-11937Resource exhaustion vulnerability in whoopsieCanonical whoopsie
- CVE-2020-15136Improper authentication in etcdetcd-io etcd · go.etcd.io/etcd
- CVE-2020-15115No minimum password length in etcdetcd-io etcd · go.etcd.io/etcd/client/v3
- CVE-2020-13793Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key.
- CVE-2020-12441Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemote
- CVE-2020-16229Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16207Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16211Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16213Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16215Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16217Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.Advantech WebAccess HMI Designer
- CVE-2020-16845Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.stdlib
- CVE-2020-7817MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf).ActiveSoft MyBrowserPlus
- CVE-2020-13364A backdoor in certain Zyxel products allows remote TELNET access via a CGI script.
- CVE-2020-7459In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before pFreeBSD
- CVE-2020-7460In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before pFreeBSD