CVEs published August 18, 2020
17 CVEs were published on August 18, 2020: 3 critical, 0 high.
- Published
- 17
- Critical
- 3
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- connie-lang
- 1
- Dell Encryption Enterprise
- 1
- Elastic Enterprise Search
- 1
- Elasticsearch · org.elasticsearch:elasticsearch
- 1
- irrelon-path · @irrelon/path
- 1
- property-expr
- 1
- The ovirt Project ovirt-engine
- 1
- TIBCO Software TIBCO Data Virtualization
- 1
Critical 3
Medium, low and unrated 14
- CVE-2020-23934An issue was discovered in RiteCMS 2.2.1.
- CVE-2020-15926Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the clien
- CVE-2020-5385Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability bDell Encryption Enterprise
- CVE-2020-24032tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
- CVE-2020-15865A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-6
- CVE-2020-9415TIBCO Data VirtualizationTIBCO Software TIBCO Data Virtualization
- CVE-2019-6258D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo
- CVE-2020-7018Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface.Elastic Enterprise Search
- CVE-2020-7019In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security.Elasticsearch · org.elasticsearch:elasticsearch
- CVE-2020-14936Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
- CVE-2020-14935Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function.
- CVE-2020-14934Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
- CVE-2020-14937Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder.
- CVE-2020-14333A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, The ovirt Project ovirt-engine