CVEs published August 13, 2020
112 CVEs were published on August 13, 2020: 1 critical, 5 high. 1 is now in CISA KEV.
- Published
- 112
- Critical
- 1
- High
- 5
- Medium
- 9
- Low
- 1
- Unrated
- 96
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- Intel(R) Server Boards, Server Systems and Compute Modules…
- 22
- Intel(R) Graphics Drivers Advisory
- 8
- GitLab
- 6
- Intel(R) Wireless Bluetooth(R) Advisory
- 4
- McAfee DLP ePO extension
- 4
- Intel(R) Server Board Families Advisory
- 3
- McAfee Data Loss Prevention
- 2
- Android
- 1
- IBM Maximo Asset Management
- 1
- IBM WebSphere Application Server
- 1
Critical 1
High 5
- CVE-2020-7360Philips SmartControl DLL HijackingPhilips SmartControl
- CVE-2020-13285For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip.GitLab
- CVE-2020-13283For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title.GitLab
- CVE-2020-4589IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specialIBM WebSphere Application Server
- CVE-2020-7304DLP ePO extension - Cross-site request forgeryMcAfee DLP ePO extension
Medium, low and unrated 106
- CVE-2019-20383ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via
- CVE-2020-24342Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a
- CVE-2020-24343Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.
- CVE-2020-24344JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
- CVE-2020-24345JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a).
- CVE-2020-24346njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.
- CVE-2020-24347njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
- CVE-2020-24348njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.
- CVE-2020-24349njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c.
- CVE-2020-24330An issue was discovered in TrouSerS through 0.3.14.
- CVE-2020-24331An issue was discovered in TrouSerS through 0.3.14.
- CVE-2020-24332An issue was discovered in TrouSerS through 0.3.14.
- CVE-2020-17498In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash.
- CVE-2020-0261In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file.Android
- CVE-2020-14483A timeout during a TLS handshake can result in the connection failing to terminate.Niagara
- CVE-2020-15947A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticate
- CVE-2020-11733An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware.
- CVE-2020-15925A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary
- CVE-2020-13286For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request ForgerGitLab
- CVE-2020-13281For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import featureGitLab
- CVE-2020-13280For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.GitLab
- CVE-2020-13282For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroupGitLab
- CVE-2019-16374Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length.
- CVE-2020-16087An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0.
- CVE-2019-4582IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system.IBM Maximo Asset Management
- CVE-2019-14620Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable dIntel(R) Wireless Bluetooth(R) Advisory
- CVE-2020-0553Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to potIntel(R) Wireless Bluetooth(R) Advisory
- CVE-2020-0555Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation Intel(R) Wireless Bluetooth(R) Advisory
- CVE-2020-0554Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged usIntel(R) Wireless Bluetooth(R) Advisory
- CVE-2020-0559Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an auIntel(R) PROSet/Wireless WiFi Advisory
- CVE-2020-12299Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to poIntel(R) Server Board Families Advisory
- CVE-2020-12301Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to poteIntel(R) Server Board Families Advisory
- CVE-2020-12300Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged userIntel(R) Server Board Families Advisory
- CVE-2020-8683Improper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated useIntel(R) Graphics Drivers Advisory
- CVE-2020-8682Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potenIntel(R) Graphics Drivers Advisory
- CVE-2020-0512Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to pIntel(R) Graphics Drivers Advisory
- CVE-2020-8679Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an authenticated user tIntel(R) Graphics Drivers Advisory
- CVE-2020-7307DLP for Mac - Unprotected Storage of CredentialsMcAfee Data Loss Prevention
- CVE-2020-8680Race condition in some Intel(R) Graphics Drivers before version 15.40.45.5126 may allow an authenticated user to potentially enable escalatiIntel(R) Graphics Drivers Advisory
- CVE-2020-8681Out of bounds write in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to poteIntel(R) Graphics Drivers Advisory
- CVE-2020-0513Out of bounds write for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable esIntel(R) Graphics Drivers Advisory
- CVE-2020-0510Out of bounds read in some Intel(R) Graphics Drivers before versions 15.45.31.5127 and 15.40.45.5126 may allow an authenticated user to poteIntel(R) Graphics Drivers Advisory
- CVE-2020-8684Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1.2.1 may allow a privIntel(R) PAC with Arria(R) 10 GX FPGA Advisory
- CVE-2020-8685Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable Intel (R) LED Manager for NUC Advisory
- CVE-2020-8687Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7.Intel(R) RSTe Software RAID Driver for the Intel(R) Server…
- CVE-2020-8688Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of Intel(R) RAID Web Console 3 for Windows* Advisory
- CVE-2020-8689Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially enIntel(R) Wireless for Open Source Advisory
- CVE-2020-8720Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privilegeIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-7306DLP for Mac - Unprotected Storage of CredentialsMcAfee Data Loss Prevention
- CVE-2020-7305DLP ePO extension - Privilege escalationMcAfee DLP ePO extension
- CVE-2020-8717Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an aIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8714Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated uIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8716Improper access control for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated uIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8715Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user toIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8729Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allowIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8706Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-7303DLP ePO extension - Cross-site scriptingMcAfee DLP ePO extension
- CVE-2020-8713Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticatedIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8723Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated usIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8709Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allowIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8732Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allowIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8722Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privilegeIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-7302DLP ePO extension - Unrestricted Upload of File with Dangerous TypeMcAfee DLP ePO extension
- CVE-2020-8718Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authentiIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8712Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow Intel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8711Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow Intel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8710Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privilIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8721Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged useIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8719Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged Intel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8707Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticatIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8731Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before versiIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8730Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user Intel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8708Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticatedIntel(R) Server Boards, Server Systems and Compute Modules…
- CVE-2020-8733Improper buffer restrictions in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentiIntel(R) Server Board M10JNP2SB Advisory
- CVE-2020-8736Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user Intel(R) Computing Improvement Program Advisory
- CVE-2020-8742Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via loIntel(R) NUCs Advisory
- CVE-2020-8743Improper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions, may allow an authenticated user to potentiallIntel(R) Mailbox Interface driver Advisory
- CVE-2020-8763Improper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for Windows* 10 may allow an authenticated user Intel(R) RealSense(TM) D400 Series Advisory
- CVE-2020-12287Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authenticated user to potentiaIntel(R) Distribution of OpenVINO(TM) Toolkit Advisory
- CVE-2020-17538A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a
- CVE-2020-16310A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker
- CVE-2020-16309A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker
- CVE-2020-16308A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to ca
- CVE-2020-16307A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote
- CVE-2020-8759Improper access control in the installer for Intel(R) SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalIntel(R) SSD DCT Advisory
- CVE-2020-16306A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a den
- CVE-2020-16305A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attac
- CVE-2020-16304A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a re
- CVE-2020-16303A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote
- CVE-2020-16302A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacke
- CVE-2020-16301A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker
- CVE-2020-16300A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker
- CVE-2020-16299A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote a
- CVE-2020-16298A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote at
- CVE-2020-16297A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a
- CVE-2019-14630Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentialIntel(R) Thunderbolt(TM) Controller Advisory
- CVE-2020-16296A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows
- CVE-2020-16295A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote atta
- CVE-2020-16294A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to
- CVE-2020-16293A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Softwa
- CVE-2020-16292A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attac
- CVE-2020-16291A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a deni
- CVE-2020-16290A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacke
- CVE-2020-16289A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to c
- CVE-2020-16288A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attack
- CVE-2020-16287A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacke