CVEs published August 29, 2020
8 CVEs were published on August 29, 2020: 1 critical, 4 high. 1 is now in CISA KEV.
- Published
- 8
- Critical
- 1
- High
- 4
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Cisco IOS XR Software
- 1
- net.sf.mpxj:mpxj
- 1
- rgb
- 1
Critical 1
High 4
- CVE-2020-24972The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr:
- CVE-2020-24897The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HT
- CVE-2020-24898The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Table from CSV" macro (U
- CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityCisco IOS XR Software
Medium, low and unrated 3
- CVE-2020-24928managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows att
- CVE-2020-25019jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is
- CVE-2020-25016A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or drgb