CVEs published August 25, 2020
52 CVEs were published on August 25, 2020: 4 critical, 22 high.
- Published
- 52
- Critical
- 4
- High
- 22
- Medium
- 8
- Low
- 1
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Parallels Desktop
- 13
- Marvell QConvergeConsole
- 10
- Cellopoint CelloOS
- 3
- Secomea GateManager
- 3
- CyberSolutions CyberMail
- 2
- Foxit Studio Photo
- 2
- Kajitori Co. Exment
- 2
- Softing Industrial Automation all versions prior to the lat…
- 2
- Advantech iView
- 1
- Ansible
- 1
Critical 4
- CVE-2020-15639This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-14524Softing Industrial Automation OPCSofting Industrial Automation all versions prior to the lat…
- CVE-2020-14510OFF-BY-ONE ERROR CWE-193Secomea GateManager
- CVE-2020-14500IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158Secomea GateManager all versions prior to
High 22
- CVE-2020-17404This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17403This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17389This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-17387This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-17388This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-15644This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-15645This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-15641This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-15642This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole Marvell QConvergeConsole
- CVE-2020-15643This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-15640This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64.Marvell QConvergeConsole
- CVE-2020-17399This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17400This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17397This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17395This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17396This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17392This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255.Parallels Desktop
- CVE-2020-14522Softing Industrial Automation OPCSofting Industrial Automation all versions prior to the lat…
- CVE-2020-14512USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916Secomea GateManager
- CVE-2020-14508OFF-BY-ONE ERROR CWE-193Secomea GateManager
- CVE-2020-17385Cellopoint CelloOS - Unauthenticated Arbitrary File DisclosureCellopoint CelloOS
- CVE-2020-17384Cellopoint CelloOS - Remote Command Execution (RCE)Cellopoint CelloOS
Medium, low and unrated 26
- CVE-2019-14904A flaw was found in the solaris_zone module from the Ansible Community modules.Ansible
- CVE-2020-19005zrlog v2.1.0 has a vulnerability with the permission check.
- CVE-2020-15777An issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise.com.gradle:gradle-enterprise-maven-extension
- CVE-2020-17402This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270).Parallels Desktop
- CVE-2020-17401This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17398This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17393This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255.Parallels Desktop
- CVE-2020-17394This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4.Parallels Desktop
- CVE-2020-17391This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255.Parallels Desktop
- CVE-2020-17390This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123.Parallels Desktop
- CVE-2020-16197An issue was discovered in Octopus Deploy 3.4.
- CVE-2020-7824Ericssonlg iPECS Privilege Escalation VulnerabilityEricsson-LG iPCES UCM
- CVE-2020-24622In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.
- CVE-2020-16245Advantech iView, Versions 5.7 and prior.Advantech iView
- CVE-2020-24616FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anterocom.fasterxml.jackson.core:jackson-databind
- CVE-2020-14042** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later.codiad/codiad
- CVE-2020-24609TechKshetra Info Solutions Pvt.
- CVE-2020-24242In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory.
- CVE-2020-24241In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c.
- CVE-2020-24240GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered.
- CVE-2020-24614Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code.
- CVE-2020-17386Cellopoint CelloOS - Server-Side Request Forgery (SSRF)Cellopoint CelloOS
- CVE-2020-5619Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unKajitori Co. Exment
- CVE-2020-5620Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a Kajitori Co. Exment
- CVE-2020-5540Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script or HTML via a specialCyberSolutions CyberMail
- CVE-2020-5541Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary sites and conduct phishiCyberSolutions CyberMail