CVEs published August 30, 2020
7 CVEs were published on August 30, 2020: 0 critical, 2 high.
- Published
- 7
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Bitdefender Endpoinit Security Tools for Windows · Bitdefen…
- 1
- bl
- 1
- json · org.webjars.npm:json
- 1
- librepo
- 1
High 2
Medium, low and unrated 5
- CVE-2020-24104XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected
- CVE-2020-24223Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.
- CVE-2020-24917osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
- CVE-2020-14352A flaw was found in librepo in versions before 1.12.1.librepo
- CVE-2020-8244A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even tybl