CVEs published August 14, 2020
30 CVEs were published on August 14, 2020: 2 critical, 1 high. 1 is now in CISA KEV.
- Published
- 30
- Critical
- 2
- High
- 1
- Medium
- 4
- Low
- 1
- Unrated
- 22
- Now in CISA KEV
- 1
- Fix available
- 6
Most affected products
- FusionCompute
- 2
- triaxtec openapi-python-client · openapi-python-client
- 2
- Adobe Helix
- 1
- composer windows-setup
- 1
- Fortinet FortiOS
- 1
- G-Cam and G-Code
- 1
- IBM Event Streams
- 1
- madlib-object-utils
- 1
- phpjs
- 1
- Siemens AG Automation License Manager
- 1
Critical 2
High 1
Medium, low and unrated 27
- CVE-2020-17474A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary ne
- CVE-2020-17475Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending p
- CVE-2020-17473Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-las
- CVE-2015-8033In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.
- CVE-2015-8032In Textpattern 4.5.7, an unprivileged author can change an article's markup setting.
- CVE-2020-15694In Nim 1.2.4, the standard library httpClient fails to properly validate the server response.
- CVE-2020-15693In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL.
- CVE-2020-15692In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser.
- CVE-2020-9767A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to
- CVE-2020-9708GHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath functionAdobe Helix
- CVE-2020-15145Local privilege elevation in Composer-Setup for Windowscomposer windows-setup
- CVE-2020-15141Path Traversal in openapi-python-clienttriaxtec openapi-python-client · openapi-python-client
- CVE-2020-22722Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file.
- CVE-2020-22721A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscella
- CVE-2019-5591A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive informationFortinet FortiOS
- CVE-2020-10055A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x).Siemens AG Desigo CC
- CVE-2020-15781A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30).Siemens AG SICAM WEB firmware for SICAM A8000 RTUs
- CVE-2020-7583A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8).Siemens AG Automation License Manager
- CVE-2020-9229FusionCompute 8.0.0 has an information disclosure vulnerability.FusionCompute
- CVE-2020-9228FusionCompute 8.0.0 has an information disclosure vulnerability.FusionCompute
- CVE-2020-17462CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CV
- CVE-2019-19643ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.
- CVE-2020-16205Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1G-Cam and G-Code
- CVE-2020-12648A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configurtinymce
- CVE-2019-6112A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to
- CVE-2019-7410There is stored cross site scripting (XSS) in Galileo CMS v0.042.
- CVE-2020-4662IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation.IBM Event Streams