CVEs published August 20, 2020
16 CVEs were published on August 20, 2020: 0 critical, 2 high.
- Published
- 16
- Critical
- 0
- High
- 2
- Medium
- 2
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM Content Navigator
- 2
- github.com/hashicorp/vault-ssh-helper
- 1
- Open Robotics ros
- 1
- PX4 MAVLink
- 1
High 2
Medium, low and unrated 14
- CVE-2020-12618eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones.
- CVE-2020-12619MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones.
- CVE-2020-24359HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's netgithub.com/hashicorp/vault-ssh-helper
- CVE-2020-4687IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have accIBM Content Navigator
- CVE-2020-4548IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation.IBM Content Navigator
- CVE-2020-16282In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user.
- CVE-2020-16281The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and
- CVE-2020-16280Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing admini
- CVE-2020-16279The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed
- CVE-2020-23935Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".
- CVE-2020-23936PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something
- CVE-2019-20152An XSS issue was discovered in TreasuryXpress 19191105.
- CVE-2019-20151An XSS issue was discovered in TreasuryXpress 19191105.
- CVE-2019-20150In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them.