CVEs published August 27, 2020
54 CVEs were published on August 27, 2020: 0 critical, 9 high.
- Published
- 54
- Critical
- 0
- High
- 9
- Medium
- 10
- Low
- 3
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- IBM Security Guardium Insights
- 8
- Cisco NX-OS Software
- 7
- GitHub Enterprise Server
- 2
- scalyr-agent-2
- 2
- Cisco Unified Computing System
- 1
- Dell Isilon OneFS
- 1
- IBM WebSphere Virtual Enterprise · IBM WebSphere Applicatio…
- 1
- Trend Micro Deep Security
- 1
- Trend Micro Deep Security · Trend Micro Vulnerability Manag…
- 1
- Trend Micro Vulnerability Protection
- 1
High 9
- CVE-2020-3517Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3338Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3394Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation VulnerabilityCisco NX-OS Software
- CVE-2020-3397Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3398Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3415Cisco NX-OS Software Data Management Engine Remote Code Execution VulnerabilityCisco NX-OS Software
- CVE-2020-3454Cisco NX-OS Software Call Home Command Injection VulnerabilityCisco NX-OS Software
- CVE-2020-24703An issue was discovered in certain WSO2 products.
- CVE-2020-24705An issue was discovered in certain WSO2 products.
Medium, low and unrated 45
- CVE-2020-10517Improper access control in GitHub Enterprise Server leading to the enumeration of private repository namesGitHub Enterprise Server
- CVE-2020-10518Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2020-24715The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks scalyr-agent-2
- CVE-2020-24714The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without tscalyr-agent-2
- CVE-2020-15605If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow aTrend Micro Vulnerability Protection
- CVE-2020-8602A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allowTrend Micro Deep Security · Trend Micro Vulnerability Manag…
- CVE-2020-15601If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unautheTrend Micro Deep Security
- CVE-2020-24618In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can
- CVE-2020-5383Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise comDell Isilon OneFS
- CVE-2020-24716OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.
- CVE-2020-24717OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equi
- CVE-2020-24203Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management
- CVE-2020-24202File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allo
- CVE-2020-24196An Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated admin to conduct remote code execution.
- CVE-2020-3504Cisco UCS Manager Software Local Management CLI Denial of Service VulnerabilityCisco Unified Computing System
- CVE-2020-14415oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
- CVE-2020-16142On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a devi
- CVE-2020-23576Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.
- CVE-2020-24390eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authenticat
- CVE-2020-23983Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags.
- CVE-2020-23984Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags.
- CVE-2020-23982DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'
- CVE-2020-2398113enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter.
- CVE-2020-2397913enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter.
- CVE-2020-23978SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"
- CVE-2020-23977KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter.
- CVE-2020-23976Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.
- CVE-2020-23975Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.
- CVE-2020-23974Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Message(title-tag),
- CVE-2020-23973KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter.
- CVE-2020-23972In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application a
- CVE-2020-23980DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page.
- CVE-2020-4603IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which createIBM Security Guardium Insights
- CVE-2020-4575IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting wheIBM WebSphere Virtual Enterprise · IBM WebSphere Applicatio…
- CVE-2020-4175IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enableIBM Security Guardium Insights
- CVE-2020-4172IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters.IBM Security Guardium Insights
- CVE-2020-4171IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system.IBM Security Guardium Insights
- CVE-2020-4169IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiIBM Security Guardium Insights
- CVE-2020-4167IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improperIBM Security Guardium Insights
- CVE-2020-4166IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message iIBM Security Guardium Insights
- CVE-2020-4174IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiIBM Security Guardium Insights
- CVE-2012-2201IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids.
- CVE-2012-2160IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.
- CVE-2020-24704An issue was discovered in certain WSO2 products.
- CVE-2020-24706An issue was discovered in certain WSO2 products.