CVEs published August 7, 2020
31 CVEs were published on August 7, 2020: 0 critical, 3 high.
- Published
- 31
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache HTTP Server
- 4
- Avaya IP Office
- 1
- Handysoft hslogin2.dll
- 1
- openSUSE Leap · openSUSE Tumbleweed
- 1
- PrismJS prism · prismjs
- 1
- Secure Messaging Gateway ( SMG).
- 1
- Spring by VMware Spring Cloud Netflix · org.springframework…
- 1
- SUSE Linux Enterprise Server 12-SP4 · SUSE Linux Enterpr… +3
- 1
High 3
Medium, low and unrated 28
- CVE-2020-15065DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device vi
- CVE-2020-15064DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks
- CVE-2020-15063DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web
- CVE-2020-15062DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the
- CVE-2020-15061Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device vi
- CVE-2020-15060Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks
- CVE-2020-15059Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web
- CVE-2020-15058Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the
- CVE-2019-7005Unauthenticated Information Disclosure Vulnerability in IP OfficeAvaya IP Office
- CVE-2020-15057TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device vi
- CVE-2020-15056TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks
- CVE-2020-15055TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web
- CVE-2020-15054TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the
- CVE-2020-5412Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboardSpring by VMware Spring Cloud Netflix · org.springframework…
- CVE-2020-15480An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10.
- CVE-2020-15479An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10.
- CVE-2020-17352Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated atta
- CVE-2020-15907In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing
- CVE-2020-16167Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to recei
- CVE-2020-16169Authentication Bypass Using an Alternate Path or Channel in temi Robox OS prior to120, temi Android app up to 1.3.7931 allows remote attacke
- CVE-2020-13376SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cook
- CVE-2020-11852DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG).Secure Messaging Gateway ( SMG).
- CVE-2020-11985IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewApache HTTP Server
- CVE-2020-11993Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logginApache HTTP Server
- CVE-2020-11984Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCEApache HTTP Server
- CVE-2020-9490Apache HTTP Server versions 2.4.20 to 2.4.43.Apache HTTP Server
- CVE-2020-16168Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQ
- CVE-2020-8025outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesSUSE Linux Enterprise Server 12-SP4 · SUSE Linux Enterpr… +3