آسیبپذیریهای حیاتی هفته دوم خرداد‌ماه
با عرضه به‌روزرسانی‌های شرکت Apple، بیشترین آسیبپذیریهای این هفته مربوط به محصولات این شرکت بودند. همچنین آسیبپذیریهای بسیاری با سطوح خطر «بالا» و «حیاتی» در سایر محصولات شرکت‌های مهم از جمله IBM، FreeRDP، SQLite، VMware، Huawei، Linux Kernel و ... شناسایی شده است. بعلاوه مرورگر محبوب فایرفاکس و چندین افزونه مهم وردپرس نیز چندین آسیب‌پذیری پرخطر و حیاتی داشتند. امّا از مهم‌ترین آسیبپذیریهای این هفته، دو آسیب‌پذیری با امتیاز مبنای «۱۰» در SaltStack بود که محصولات Cisco را تحت تأثیر قرار می‌دهند.
لیست این آسیب‌پذیری‌ها به همراه لینک وصله‌ها و به‌روزرسانی‌های ارائه‌شده در جدول زیر آمده است.
|
رفع آسیب‌پذیری |
نوع آسیب‌پذیری |
محصول آسیب‌پذیر |
امتیاز مبنا |
شناسه آسیب‌پذیری |
|
Not Defined |
Information Disclosure |
ABB Device Library Wizard Secure Storage |
۵.۵ |
CVE-2020-8482 |
|
Information Disclosure |
Aegir |
۹.۶ |
CVE-2020-11059 |
|
|
CSRF |
AirMax AirOS |
۸.۸ |
CVE-2020-8168 |
|
|
XSS |
AirMax AirOS Reflected |
۶.۱ |
CVE-2020-8170 |
|
|
Remote Code Execution |
AirMax AirOS |
۹.۸ |
CVE-2020-8171 |
|
|
Not Defined |
Privilege Escalation |
Anchore Engine Container Image Manifest |
۷.۷ |
CVE-2020-11075 |
|
Memory Corruption |
Apple iCloud ImageIO |
۷.۸ |
CVE-2020-3878 |
|
|
Memory Corruption |
Apple iCloud ImageIO |
۶.۳ |
CVE-2020-9790 |
|
|
Memory Corruption |
Apple iCloud ImageIO |
۶.۳ |
CVE-2020-9789 |
|
|
Memory Corruption |
Apple iCloud SQLite |
۵.۳ |
CVE-2020-9794 |
|
|
XSS |
Apple iCloud WebKit |
۴.۳ |
CVE-2020-9843 |
|
|
Memory Corruption |
Apple iCloud WebKit |
۶.۳ |
CVE-2020-9803 |
|
|
Memory Corruption |
Apple iCloud WebKit |
۶.۳ |
CVE-2020-9807 |
|
|
Memory Corruption |
Apple iCloud WebKit |
۶.۳ |
CVE-2020-9806 |
|
|
Privilege Escalation |
Apple iCloud WebKit |
۶.۳ |
CVE-2020-9850 |
|
|
Privilege Escalation |
Apple iCloud WebKit |
۶.۳ |
CVE-2020-9802 |
|
|
Memory Corruption |
Apple iCloud WebKit Type Confusion |
۶.۳ |
CVE-2020-9800 |
|
|
XSS |
Apple iCloud WebKit Universal |
۴.۳ |
CVE-2020-9805 |
|
|
Memory Corruption |
Apple iOS Wi-Fi |
۸.۸ |
CVE-2020-3843 |
|
|
DoS |
Apple macOS Accounts |
۴.۳ |
CVE-2020-9827 |
|
|
Privilege Escalation |
Apple macOS Accounts |
۵.۳ |
CVE-2020-9772 |
|
|
DoS |
Apple macOS AirDrop |
۴.۳ |
CVE-2020-9826 |
|
|
Privilege Escalation |
Apple macOS AppleMobileFileIntegrity |
۵.۳ |
CVE-2020-9842 |
|
|
DoS |
Apple macOS AppleUSBNetworking Kernel Panic |
۴.۶ |
CVE-2020-9804 |
|
|
Memory Corruption |
Apple macOS Audio |
۶.۳ |
CVE-2020-9791 |
|
|
Memory Corruption |
Apple macOS Audio |
۶.۳ |
CVE-2020-9815 |
|
|
Information Disclosure |
Apple macOS Bluetooth |
۳.۳ |
CVE-2020-9831 |
|
|
Information Disclosure |
Apple macOS Calendar |
۴.۳ |
CVE-2020-3882 |
|
|
Information Disclosure |
Apple macOS CoreBluetooth |
۴.۳ |
CVE-2020-9828 |
|
|
Privilege Escalation |
Apple macOS CVMS |
۵.۳ |
CVE-2020-9856 |
|
|
Memory Corruption |
Apple macOS DiskArbitration |
۵.۳ |
CVE-2020-9847 |
|
|
Privilege Escalation |
Apple macOS Find My Symlink |
۵.۳ |
CVE-2020-9855 |
|
|
Memory Corruption |
Apple macOS FontParser |
۶.۳ |
CVE-2020-9816 |
|
|
Memory Corruption |
Apple macOS ImageIO |
۶.۳ |
CVE-2020-9790 |
|
|
Memory Corruption |
Apple macOS ImageIO |
۶.۳ |
CVE-2020-9789 |
|
|
Memory Corruption |
Apple macOS ImageIO |
۶.۳ |
CVE-2020-3878 |
|
|
Memory Corruption |
Apple macOS Intel Graphics Driver |
۸.۸ |
CVE-2020-9822 |
|
|
Information Disclosure |
Apple macOS IPSec |
۴.۳ |
CVE-2020-9837 |
|
|
Information Disclosure |
Apple macOS Kernel |
۳.۳ |
CVE-2020-9809 |
|
|
Information Disclosure |
Apple macOS Kernel |
۳.۳ |
CVE-2020-9812 |
|
|
Information Disclosure |
Apple macOS Kernel |
۳.۳ |
CVE-2020-9811 |
|
|
Information Disclosure |
Apple macOS Kernel |
۳.۳ |
CVE-2020-9797 |
|
|
Memory Corruption |
Apple macOS Kernel Integer |
۸.۸ |
CVE-2020-9852 |
|
|
Memory Corruption |
Apple macOS Kernel |
۸.۸ |
CVE-2020-9814 |
|
|
Memory Corruption |
Apple macOS Kernel |
۸.۸ |
CVE-2020-9813 |
|
|
Memory Corruption |
Apple macOS Kernel |
۸.۸ |
CVE-2020-9808 |
|
|
Memory Corruption |
Apple macOS Kernel |
۸.۸ |
CVE-2020-9821 |
|
|
Memory Corruption |
Apple macOS Kernel Use-After-Free |
۸.۸ |
CVE-2020-9795 |
|
|
Privilege Escalation |
Apple macOS ksh Shell |
۵.۳ |
CVE-2019-14868 |
|
|
Information Disclosure |
Apple macOS NSURL |
۴.۳ |
CVE-2020-9857 |
|
|
Privilege Escalation |
Apple macOS PackageKit |
۵.۳ |
CVE-2020-9851 |
|
|
Privilege Escalation |
Apple macOS PackageKit |
۷.۸ |
CVE-2020-9817 |
|
|
Memory Corruption |
Apple macOS Python |
۶.۳ |
CVE-2020-9793 |
|
|
Privilege Escalation |
Apple macOS Sandbox |
۵.۳ |
CVE-2020-9771 |
|
|
Privilege Escalation |
Apple macOS Sandbox |
۵.۳ |
CVE-2020-9825 |
|
|
XSS |
Apple macOS Security |
۳.۵ |
CVE-2020-9788 |
|
|
Privilege Escalation |
Apple macOS SIP |
۵.۳ |
CVE-2020-9824 |
|
|
Memory Corruption |
Apple macOS SQLite |
۵.۳ |
CVE-2020-9794 |
|
|
Race Condition |
Apple macOS System Preferences |
۵.۳ |
CVE-2020-9839 |
|
|
DoS |
Apple macOS USB Audio |
۲.۴ |
CVE-2020-9792 |
|
|
Memory Corruption |
Apple macOS Wi-Fi Double-Free |
۹.۹ |
CVE-2020-9844 |
|
|
Information Disclosure |
Apple macOS Wi-Fi |
۳.۳ |
CVE-2020-9833 |
|
|
Memory Corruption |
Apple macOS Wi-Fi |
۵.۳ |
CVE-2020-9834 |
|
|
Memory Corruption |
Apple macOS Wi-Fi |
۸.۸ |
CVE-2020-9830 |
|
|
Information Disclosure |
Apple macOS Wi-Fi |
۳.۳ |
CVE-2020-9832 |
|
|
Memory Corruption |
Apple macOS WindowServer Integer |
۸.۸ |
CVE-2020-9841 |
|
|
Privilege Escalation |
Apple macOS zsh |
۵.۳ |
CVE-2019-2004 |
|
|
Privilege Escalation |
Apple Safari |
۵.۳ |
CVE-2020-9801 |
|
|
XSS |
Apple Safari WebKit |
۴.۳ |
CVE-2020-9843 |
|
|
Memory Corruption |
Apple Safari WebKit |
۶.۳ |
CVE-2020-9803 |
|
|
Memory Corruption |
Apple Safari WebKit |
۶.۳ |
CVE-2020-9807 |
|
|
Memory Corruption |
Apple Safari WebKit |
۶.۳ |
CVE-2020-9806 |
|
|
Privilege Escalation |
Apple Safari WebKit |
۶.۳ |
CVE-2020-9850 |
|
|
Privilege Escalation |
Apple Safari WebKit |
۶.۳ |
CVE-2020-9802 |
|
|
Memory Corruption |
Apple Safari WebKit Type Confusion |
۶.۳ |
CVE-2020-9800 |
|
|
XSS |
Apple Safari WebKit Universal |
۴.۳ |
CVE-2020-9805 |
|
|
Information Disclosure |
Apple Safari WebRTC |
۳.۵ |
CVE-2019-20503 |
|
|
DoS |
Apple tvOS Accounts |
۴.۳ |
CVE-2020-9827 |
|
|
Privilege Escalation |
Apple tvOS AppleMobileFileIntegrity |
۵.۳ |
CVE-2020-9842 |
|
|
Memory Corruption |
Apple tvOS Audio |
۶.۳ |
CVE-2020-9791 |
|
|
Memory Corruption |
Apple tvOS Audio |
۶.۳ |
CVE-2020-9815 |
|
|
DoS |
Apple tvOS CoreText |
۴.۳ |
CVE-2020-9829 |
|
|
Memory Corruption |
Apple tvOS FontParser |
۶.۳ |
CVE-2020-9816 |
|
|
Memory Corruption |
Apple tvOS ImageIO |
۶.۳ |
CVE-2020-9790 |
|
|
Memory Corruption |
Apple tvOS ImageIO |
۶.۳ |
CVE-2020-9789 |
|
|
Memory Corruption |
Apple tvOS ImageIO |
۷.۰ |
CVE-2020-3878 |
|
|
Memory Corruption |
Apple tvOS IPSec |
۶.۳ |
CVE-2020-9837 |
|
|
Memory Corruption |
Apple tvOS Kerne |
۸.۸ |
CVE-2020-9814 |
|
|
Memory Corruption |
Apple tvOS Kerne |
۸.۸ |
CVE-2020-9813 |
|
|
Information Disclosure |
Apple tvOS Kernel |
۳.۳ |
CVE-2020-9809 |
|
|
Information Disclosure |
Apple tvOS Kernel |
۳.۳ |
CVE-2020-9812 |
|
|
Information Disclosure |
Apple tvOS Kernel |
۳.۳ |
CVE-2020-9811 |
|
|
Information Disclosure |
Apple tvOS Kernel |
۳.۳ |
CVE-2020-9797 |
|
|
Memory Corruption |
Apple tvOS Kernel Integer |
۸.۸ |
CVE-2020-9852 |
|
|
Memory Corruption |
Apple tvOS Kernel |
۸.۸ |
CVE-2020-9808 |
|
|
Memory Corruption |
Apple tvOS Kernel |
۸.۸ |
CVE-2020-9821 |
|
|
Memory Corruption |
Apple tvOS Kernel Use-After-Free |
۸.۸ |
CVE-2020-9795 |
|
|
Memory Corruption |
Apple tvOS SQLite |
۵.۳ |
CVE-2020-9794 |
|
|
Race Condition |
Apple tvOS System Preferences |
۷.۸ |
CVE-2020-9839 |
|
|
XSS |
Apple tvOS WebKit |
۴.۳ |
CVE-2020-9843 |
|
|
Memory Corruption |
Apple tvOS WebKit |
۶.۳ |
CVE-2020-9807 |
|
|
Memory Corruption |
Apple tvOS WebKit |
۶.۳ |
CVE-2020-9806 |
|
|
Memory Corruption |
Apple tvOS WebKit |
۶.۳ |
CVE-2020-9803 |
|
|
Privilege Escalation |
Apple tvOS WebKit |
۶.۳ |
CVE-2020-9850 |
|
|
Privilege Escalation |
Apple tvOS WebKit |
۶.۳ |
CVE-2020-9802 |
|
|
Memory Corruption |
Apple tvOS WebKit Type Confusion |
۶.۳ |
CVE-2020-9800 |
|
|
XSS |
Apple tvOS WebKit Universal |
۴.۳ |
CVE-2020-9805 |
|
|
Information Disclosure |
Apple tvOS WebRTC |
۶.۰ |
CVE-2019-2050 |
|
|
Privilege Escalation |
Apple Windows Migration Assistant Installer |
۵.۵ |
CVE-2020-9858 |
|
|
Privilege Escalation |
bbPress Plugin New User Registration |
۹.۸ |
CVE-2020-13693 |
|
|
Not Defined |
Privilege Escalation |
Bosch Recording Station Kiosk Mode |
۹.۳ |
CVE-2020-6774 |
|
Not Defined |
XSS |
Centreon host-monitoring Widget index.php |
۶.۱ |
CVE-2020-13627 |
|
Not Defined |
XSS |
Centreon host-monitoring Widget index.php |
۶.۱ |
CVE-2020-10946 |
|
Not Defined |
XSS |
Centreon host-monitoring Widget toolbar.php |
۶.۱ |
CVE-2020-13628 |
|
Information Disclosure |
Centreon Session ID |
۴.۳ |
CVE-2020-10945 |
|
|
Not Defined |
Remote Code Execution |
Cybozu Desktop |
۹.۸ |
CVE-2020-5537 |
|
Not Defined |
Privilege Escalation |
Dell Dock Firmware Update Utilities Symlink |
۷.۲ |
CVE-2020-5357 |
|
Not Defined |
Privilege Escalation |
DEXT5 DEXT5Upload dext5handler.jsp |
۹.۸ |
CVE-2020-13442 |
|
Not Defined |
Memory Corruption |
ffjpeg bmp.c bmp_load |
۶.۴ |
CVE-2020-13440 |
|
Not Defined |
Memory Corruption |
ffjpeg jfif.c jfif_decode |
۶.۴ |
CVE-2020-13439 |
|
Not Defined |
Information Disclosure |
ffjpeg jfif.c jfif_encode |
۵.۴ |
CVE-2020-13438 |
|
Information Disclosure |
FreeRDP clear_decompress_subcode_rlex |
۲.۲ |
CVE-2020-11040 |
|
|
Memory Corruption |
FreeRDP Clipboard cliprdr_read_format_list |
۴.۱ |
CVE-2020-11085 |
|
|
DoS |
FreeRDP Crash |
۲.۲ |
CVE-2020-11041 |
|
|
DoS |
FreeRDP Crash |
۴.۳ |
CVE-2020-11019 |
|
|
DoS |
FreeRDP Double-Free |
۷.۵ |
CVE-2020-11017 |
|
|
Memory Corruption |
FreeRDP irp serial_process_irp_write |
۴.۶ |
CVE-2020-11089 |
|
|
Not Defined |
Information Disclosure |
FreeRDP ntlm_read_AuthenticateMessage |
۳.۷ |
CVE-2020-11087 |
|
Information Disclosure |
FreeRDP ntlm_read_NegotiateMessage |
۳.۱ |
CVE-2020-11088 |
|
|
Not Defined |
Information Disclosure |
FreeRDP ntlm_read_ntlm_v2_client_challenge |
۳.۷ |
CVE-2020-11086 |
|
DoS |
FreeRDP Resource Exhaustion |
۶.۵ |
CVE-2020-11018 |
|
|
Information Disclosure |
FreeRDP rfx_process_message_tileset |
۲.۲ |
CVE-2020-11043 |
|
|
Memory Corruption |
FreeRDP USB Redirection Integer Overflow |
۸.۰ |
CVE-2020-11039 |
|
|
Memory Corruption |
FreeRDP video |
۷.۰ |
CVE-2020-11038 |
|
|
Not Defined |
Weak Authentication |
GNOME glib-networking TLS Certificate Verification |
۶.۹ |
CVE-2020-13645 |
|
Not Defined |
DoS |
Huawei CloudEngine 6800/CloudEngine 12800 Memory Leak |
۳.۵ |
CVE-2020-1870 |
|
Not Defined |
Memory Corruption |
Huawei E6878-370 Stack-based |
۵.۵ |
CVE-2020-1832 |
|
Weak Authentication |
Huawei Honor 9X Clock |
۲.۴ |
CVE-2020-1833 |
|
|
Information Disclosure |
Huawei Mate 10 Voice Assistant |
۳.۵ |
CVE-2020-1809 |
|
|
Privilege Escalation |
Huawei Mate 20 ADB Mode |
۵.۵ |
CVE-2020-1797 |
|
|
Privilege Escalation |
Huawei Mate 20 Digital Balance |
۵.۳ |
CVE-2020-1831 |
|
|
Privilege Escalation |
Huawei P30 NFC |
۵.۳ |
CVE-2020-1798 |
|
|
Not Defined |
Privilege Escalation |
IBM Business Automation Workflow |
۶.۷ |
CVE-2020-4490 |
|
Not Defined |
XSS |
IBM Jazz Reporting Service Web UI |
۴.۷ |
CVE-2020-4419 |
|
Not Defined |
Information Disclosure |
IBM MobileFirst Platform Foundation URL Log |
۴.۵ |
CVE-2020-4226 |
|
Not Defined |
Privilege Escalation |
IBM MQ Restricted Mode |
۶.۱ |
CVE-2020-4352 |
|
Not Defined |
XSS |
IBM Planning Analytics Web UI |
۴.۷ |
CVE-2020-4306 |
|
Not Defined |
Information Disclosure |
IBM Security Identity Governance and Intelligence Authorization |
۵.۴ |
CVE-2020-4249 |
|
Not Defined |
Information Disclosure |
IBM Security Identity Governance and Intelligence Error Message |
۲.۷ |
CVE-2020-4248 |
|
Not Defined |
Information Disclosure |
IBM Security Identity Governance and Intelligence |
۵.۳ |
CVE-2020-4244 |
|
Not Defined |
Information Disclosure |
IBM Security Identity Governance and Intelligence |
۳.۷ |
CVE-2020-4233 |
|
Not Defined |
Weak Authentication |
IBM Security Identity Governance and Intelligence Password Policy |
۴.۸ |
CVE-2020-4245 |
|
Not Defined |
Privilege Escalation |
IBM Security Identity Governance and Intelligence |
۵.۳ |
CVE-2020-4231 |
|
Not Defined |
Information Disclosure |
IBM Security Identity Governance and Intelligence User |
۵.۳ |
CVE-2020-4232 |
|
Not Defined |
XML External Entity |
IBM Security Identity Governance and Intelligence |
۶.۷ |
CVE-2020-4246 |
|
Not Defined |
Information Disclosure |
IBM Spectrum Scale Error Message |
۴.۳ |
CVE-2020-4357 |
|
Not Defined |
Privilege Escalation |
IBM Spectrum Scale GUI |
۶.۴ |
CVE-2020-4348 |
|
Not Defined |
Privilege Escalation |
IBM Spectrum Scale |
۴.۸ |
CVE-2020-4378 |
|
Not Defined |
Weak Encryption |
IBM Spectrum Scale |
۶.۴ |
CVE-2020-4379 |
|
Not Defined |
Weak Encryption |
IBM Spectrum Scale |
۶.۴ |
CVE-2020-4350 |
|
Not Defined |
Weak Encryption |
IBM Spectrum Scale |
۶.۴ |
CVE-2020-4349 |
|
Not Defined |
XSS |
IBM Spectrum Scale Web UI |
۴.۷ |
CVE-2020-4358 |
|
XSS |
Image Resizer Plugin Bulk Resize Stored |
۵.۴ |
CVE-2020-13459 |
|
|
CSRF |
Image Resizer Plugin |
۸.۸ |
CVE-2020-13458 |
|
|
SQL Injection |
Jason2605 AdminPanel editPlayer.php |
۹.۸ |
CVE-2020-13433 |
|
|
Not Defined |
DoS |
JerryScript Assertion |
۷.۵ |
CVE-2020-13622 |
|
Not Defined |
DoS |
JerryScript js-scanner.c scanner_reverse_info_list |
۷.۵ |
CVE-2020-13649 |
|
Not Defined |
DoS |
JerryScript Proxy Memory Consumption |
۷.۵ |
CVE-2020-13623 |
|
Not Defined |
Privilege Escalation |
Kantech EntraPass |
۸.۸ |
CVE-2020-9046 |
|
Not Defined |
Remote Code Execution |
Kaoni ezHTTPTrans ActiveX Control Ezhttptrans.ocx |
۹.۸ |
CVE-2020-7812 |
|
Not Defined |
Information Disclosure |
Kintone Mobile |
۴.۶ |
CVE-2020-5573 |
|
Privilege Escalation |
Knock Knock Plugin IP Whitelist |
۹.۱ |
CVE-2020-13485 |
|
|
Open Redirect |
Knock Knock Plugin |
۶.۶ |
CVE-2020-13486 |
|
|
DoS |
Lenovo Printer LJ4010DN |
۷.۵ |
CVE-2020-8330 |
|
|
DoS |
Lenovo Printer LJ4010DN |
۷.۵ |
CVE-2020-8329 |
|
|
Privilege Escalation |
Linux Kernel SELinux LSM Hook |
۶.۱ |
CVE-2020-10751 |
|
|
DoS |
Linux Kernel tw5864-video.c tw5864_handle_frame |
۷.۵ |
CVE-2019-20806 |
|
|
Remote Code Execution |
mappress-google-maps-for-wordpress Plugin Capability Check |
۸.۸ |
CVE-2020-12675 |
|
|
Spoofing |
Mozilla Firefox Location Bar spoofing |
۴.۳ |
CVE-2020-12394 |
|
|
Memory Corruption |
Mozilla Firefox |
۹.۸ |
CVE-2020-12396 |
|
|
Information Disclosure |
Mozilla Firefox Native-to-JS Bridging Token |
۷.۵ |
CVE-2020-6830 |
|
|
Privilege Escalation |
Mozilla Firefox URL |
۹.۸ |
CVE-2020-12390 |
|
|
Privilege Escalation |
Mozilla Firefox/Firefox ESR Content Processing Sandbox |
۱۰.۰ |
CVE-2020-12389 |
|
|
Privilege Escalation |
Mozilla Firefox/Firefox ESR Content Processing Sandbox |
۱۰.۰ |
CVE-2020-12388 |
|
|
Privilege Escalation |
Mozilla Firefox/Firefox ESR data URI CSP |
۷.۵ |
CVE-2020-12391 |
|
|
Command Injection |
Mozilla Firefox/Firefox ESR/Thunderbird |
۷.۸ |
CVE-2020-12393 |
|
|
Information Disclosure |
Mozilla Firefox/Firefox ESR/Thunderbird DevTools |
۵.۵ |
CVE-2020-12392 |
|
|
Memory Corruption |
Mozilla Firefox/Firefox ESR/Thunderbird |
۹.۸ |
CVE-2020-12395 |
|
|
DoS |
Mozilla Firefox/Firefox ESR/Thunderbird Web Worker Use-After-Free |
۸.۱ |
CVE-2020-12387 |
|
|
Not Defined |
Memory Corruption |
Mozilla Firefox/Firefox ESR/Thunderbird WebRTC |
۹.۸ |
CVE-2020-6831 |
|
DoS |
MuleSoft Mule Community Edition Resource Exhaustion |
۴.۳ |
CVE-2020-6937 |
|
|
Not Defined |
Weak Authentication |
Netgear R7000 SSL Certificate Validator |
۵.۹ |
CVE-2020-13245 |
|
Not Defined |
Information Disclosure |
netqmail qmail-verify |
۵.۵ |
CVE-2020-3812 |
|
Not Defined |
Privilege Escalation |
netqmail qmail-verify |
۷.۴ |
CVE-2020-3811 |
|
Remote Code Execution |
node-dns-sync |
۹.۸ |
CVE-2020-11079 |
|
|
Not Defined |
Remote Code Execution |
Pi-Hole Web DHCP |
۹.۱ |
CVE-2020-8816 |
|
Not Defined |
Memory Corruption |
QEMU es1370.c es1370_transfer_audio |
۵.۴ |
CVE-2020-13361 |
|
Not Defined |
Information Disclosure |
QEMU megasas.c megasas_lookup_frame |
۳.۲ |
CVE-2020-13362 |
|
Not Defined |
Information Disclosure |
QEMU sd.c sdhci_write() |
۴.۴ |
CVE-2020-13253 |
|
Privilege Escalation |
Real-Time Find and Replace Plugin far_options_page |
۸.۸ |
CVE-2020-13641 |
|
|
Directory Traversal |
SaltStack FrameWork Vulnerabilities Affecting Cisco Products |
۱۰.۰ |
CVE-2020-11652 |
|
|
Weak Authentication |
SaltStack FrameWork Vulnerabilities Affecting Cisco Products |
۱۰.۰ |
CVE-2020-11651 |
|
|
Privilege Escalation |
SiteOrigin Page Builder Plugin action_builder_content |
۸.۸ |
CVE-2020-13642 |
|
|
XSS |
SiteOrigin Page Builder Plugin Live Editor |
۸.۸ |
CVE-2020-13643 |
|
|
Not Defined |
Privilege Escalation |
SmartDraw 2020 Installer SDNotify.exe |
۸.۲ |
CVE-2020-13386 |
|
Information Disclosure |
snyk-broker Commits API |
۳.۵ |
CVE-2020-7651 |
|
|
Information Disclosure |
snyk-broker Debug Key |
۳.۵ |
CVE-2020-7654 |
|
|
Directory Traversal |
snyk-broker directory traversal |
۳.۵ |
CVE-2020-7652 |
|
|
Information Disclosure |
snyk-broker |
۳.۵ |
CVE-2020-7650 |
|
|
Information Disclosure |
snyk-broker |
۳.۵ |
CVE-2020-7648 |
|
|
Official Fix |
Information Disclosure |
snyk-broker Symlink |
۴.۹ |
CVE-2020-7653 |
|
Not Defined |
Memory Corruption |
SQLite expr.c sqlite3ExprCodeTarget |
۷.۴ |
CVE-2020-13435 |
|
DoS |
SQLite fts3_snippet.c matchinfo() |
۷.۵ |
CVE-2020-13632 |
|
|
Not Defined |
Memory Corruption |
SQLite printf.c sqlite3_str_vappendf |
۷.۴ |
CVE-2020-13434 |
|
SQL Injection |
SQLite Snippet fts3.c fts3EvalNextRow |
۹.۸ |
CVE-2020-13630 |
|
|
Privilege Escalation |
SQLite Virtual Table alter.c |
۷.۵ |
CVE-2020-13631 |
|
|
Not Defined |
Privilege Escalation |
SWARCO CPU LS4000 Access Control |
۱۰.۰ |
CVE-2020-12493 |
|
Privilege Escalation |
Sympa |
۷.۸ |
CVE-2020-10936 |
|
|
Not Defined |
Privilege Escalation |
Teradici PCoIP Standard Agent/Graphics Agent Named Pipe pcoip_credential_provider |
۷.۸ |
CVE-2020-13173 |
|
Not Defined |
Information Disclosure |
Trend Micro InterScan Web Security Virtual Appliance |
۷.۵ |
CVE-2020-8604 |
|
Not Defined |
Remote Code Execution |
Trend Micro InterScan Web Security Virtual Appliance |
۸.۸ |
CVE-2020-8605 |
|
Not Defined |
Weak Authentication |
Trend Micro InterScan Web Security Virtual Appliance |
۹.۸ |
CVE-2020-8606 |
|
Not Defined |
XSS |
Trend Micro InterScan Web Security Virtual Appliance Web Interface |
۶.۱ |
CVE-2020-8603 |
|
Privilege Escalation |
Undertow Chunk Size Request Smuggling |
۶.۹ |
CVE-2020-10719 |
|
|
Privilege Escalation |
VIM rvim OS |
۹.۸ |
CVE-2019-20807 |
|
|
Privilege Escalation |
Vivotek Network Camera OS |
۵.۵ |
CVE-2020-11950 |
|
|
Information Disclosure |
Vivotek Network Camera Web Service testserver.cgi |
۳.۵ |
CVE-2020-11949 |
|
|
DoS |
VMware ESXi/Fusion/Workstation Shader Crash |
۳.۵ |
CVE-2020-3958 |
|
|
DoS |
VMware ESXi/Fusion/Workstation VMCI Module Memory Leak |
۳.۵ |
CVE-2020-3959 |
|
|
Privilege Escalation |
VMware Fusion TOCTOU |
۵.۳ |
CVE-2020-3957 |
|
|
Not Defined |
Memory Corruption |
Windows Master Driver WoptiHWDetect.SYS) |
۷.۲ |
CVE-2020-13634 |
|
Privilege Escalation |
XCloner Local File Inclusion |
۶.۹ |
CVE-2020-13424 |
