CVEs published August 28, 2020

17 CVEs were published on August 28, 2020: 2 critical, 3 high.

Published: 17
Critical: 2
High: 3
Medium: 3
Low: 1
Unrated: 8
Now in CISA KEV: 0
Fix available: 6

Most affected products

baserproject basercms · baserproject/basercms: 3
Neuroinformatics Unit, Integrative Computational Brain Scie…: 3
IBM Resilient SOAR: 2
github.com/grafana/grafana: 1
IBM Spectrum Protect: 1
IBM Spectrum Protect Server: 1
InternationalScratchWiki mediawiki-scratch-login: 1
maxieds ChameleonMiniLiveDebugger: 1
Netflix Orca Spinnaker · com.netflix.spinnaker.orca:orca-co…: 1
Nitori Holdings Co. NITORI App for Android and NITORI App f…: 1

Critical 2

CVE-2020-15165Potentially tampered sources on Play Store for Chameleon Mini Live Debuggermaxieds ChameleonMiniLiveDebuggerCritical · 9.3Aug 28, 2020
CVE-2020-15164Authentication Bypass in Scratch Login (mediawiki-scratch-login)InternationalScratchWiki mediawiki-scratch-loginCritical · 10.0Fix availableAug 28, 2020

High 3

CVE-2020-15159Cross Site Scripting leading to RCE in baserCMSbaserproject basercms · baserproject/basercmsHigh · 7.6Fix availableAug 28, 2020
CVE-2020-15155Cross-Site Scripting in baserCMSbaserproject basercms · baserproject/basercmsHigh · 7.3Fix availableAug 28, 2020
CVE-2020-15154Cross Site Scripting in baserCMSbaserproject basercms · baserproject/basercmsHigh · 7.3Fix availableAug 28, 2020

Medium, low and unrated 12

CVE-2012-4818IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by iUnratedAug 28, 2020
CVE-2020-16610Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF).UnratedAug 28, 2020
CVE-2019-19499Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modigithub.com/grafana/grafanaUnratedFix availableAug 28, 2020
CVE-2020-9298The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requesNetflix Orca Spinnaker · com.netflix.spinnaker.orca:orca-co…UnratedFix availableAug 28, 2020
CVE-2020-4591IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally notIBM Spectrum Protect ServerLow · 2.9Aug 28, 2020
CVE-2020-4559IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input.IBM Spectrum ProtectMedium · 5.9Aug 28, 2020
CVE-2019-4579IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in dIBM Resilient SOARMedium · 4.3Aug 28, 2020
CVE-2019-4533IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation.IBM Resilient SOARMedium · 4.3Aug 28, 2020
CVE-2020-5625Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectorsNeuroinformatics Unit, Integrative Computational Brain Scie…UnratedAug 28, 2020
CVE-2020-5623NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user toNitori Holdings Co. NITORI App for Android and NITORI App f…UnratedAug 28, 2020
CVE-2020-5624SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectorNeuroinformatics Unit, Integrative Computational Brain Scie…UnratedAug 28, 2020
CVE-2020-5621Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 FirmNeuroinformatics Unit, Integrative Computational Brain Scie…UnratedAug 28, 2020