آسیب‌پذیری‌های حیاتی هفته اول فروردین‌ماه
این هفته در محصولات بسیار مهم سیسکو، IBM و Joomla! چندین آسیبپذیری با سطح خطر «حیاتی» و «بالا» شناسایی شد. همچنین محصولات پرکاربرد شرکت‌های VMware، Google و Fortinet نیز چندین آسیبپذیری حیاتی داشتند. افزونۀ پرکاربرد WordPress Live Chat Support (با بیش از ۵۰ هزار نصب فعال) نیز آسیبپذیری با سطح خطر «خطرناک» داشت. بیشتر آسیب‌پذیری‌های این هفته از نوع ارتقاء امتیاز بودند.
|
نوع آسیبپذیری |
محصول آسیب‌پذیر |
شناسه آسیبپذیری |
|
Privilege Escalation |
Ansible Engine Fetch Module |
CVE-2020-1735 |
|
Information Disclosure |
Ansible Engine |
CVE-2020-1736 |
|
Information Disclosure |
Ansible Engine Kubernetes |
CVE-2020-1753 |
|
Privilege Escalation |
Ansible Engine Package Module |
CVE-2020-1738 |
|
Privilege Escalation |
Ansible Engine Vault |
CVE-2020-1740 |
|
Weak Authentication |
Apache Geode Hostname Verification |
CVE-2019-10091 |
|
Denial of Service |
Asus AsusWRT httpd APP_Installation.asp |
CVE-2018-20335 |
|
Command Injection |
Asus AsusWRT start_apply.htm |
CVE-2018-20334 |
|
Information Disclosure |
Asus AsusWRT USB Device update_applist.asp |
CVE-2018-20333 |
|
Cross Site Request Forgery |
Canon Oce Colorwave 500 CSRF Protection |
CVE-2020-10671 |
|
Weak Authentication |
Canon Oce Colorwave 500 home.jsp |
CVE-2020-10669 |
|
Cross Site Scripting |
Canon Oce Colorwave 500 Web Application home.jsp |
CVE-2020-10668 |
|
Cross Site Scripting |
Canon Oce Colorwave 500 Web Application indexExternalLocation.jsp |
CVE-2020-10667 |
|
Cross Site Scripting |
Canon Oce Colorwave 500 Web Application settingDialogContent.jsp |
CVE-2020-10670 |
|
SQL Injection |
CentOS-WebPanel.com CentOS Web Panel loader_ajax.php |
CVE-2020-10230 |
|
Open Redirect |
Centreon login.php |
CVE-2019-19484 |
|
Command Injection |
Centreon Plugin Test minPlayCommand.php |
CVE-2019-19487 |
|
Directory Traversal |
Centreon Plugin Test minPlayCommand.php |
CVE-2019-19486 |
|
Privilege Escalation |
CheckUser Extension Permission |
CVE-2019-16529 |
|
Privilege Escalation |
Cisco SD-WAN Solution CLI |
CVE-2020-3266 |
|
Memory Corruption |
Cisco SD-WAN Solution |
CVE-2020-3264 |
|
Privilege Escalation |
Cisco SD-WAN Solution |
CVE-2020-3265 |
|
SQL Injection |
Cisco SD-WAN Solution vManage Web UI |
CVE-2019-16012 |
|
Cross Site Scripting |
Cisco SD-WAN vManage Web-based Management Interface |
CVE-2019-16010 |
|
Weak Authentication |
Citrix SD-WAN SSL Certificate Validator |
CVE-2020-6175 |
|
Privilege Escalation |
closure-compiler-stream exports |
CVE-2020-7603 |
|
Cross Site Request Forgery |
Cloud Native Computing Foundation Harbor VMware Harbor Container Registry |
CVE-2019-19025 |
|
Privilege Escalation |
Cloud Native Computing Foundation Harbor VMware Harbor Container Registry |
CVE-2019-19023 |
|
SQL Injection |
Cloud Native Computing Foundation Harbor VMware Harbor Container Registry |
CVE-2019-19029 |
|
SQL Injection |
Cloud Native Computing Foundation Harbor VMware Harbor Container Registry |
CVE-2019-19026 |
|
Cross Site Scripting |
CMS Made Simple Filemanager moduleinterface.php |
CVE-2020-10681 |
|
Privilege Escalation |
CMS Made Simple Filemanager php.jpegd |
CVE-2020-10682 |
|
Privilege Escalation |
Combodo iTop Web Application |
CVE-2019-19821 |
|
Privilege Escalation |
cPanel Account Suspension |
CVE-2019-20491 |
|
Cross Site Scripting |
cPanel Backup Restore Stored |
CVE-2019-20497 |
|
Privilege Escalation |
cPanel Branding API |
CVE-2020-10118 |
|
Remote Code Execution |
cPanel cpsrvd rsync Shell |
CVE-2020-10120 |
|
Cross Site Scripting |
cPanel HTML File Editor Stored |
CVE-2020-10114 |
|
Cross Site Scripting |
cPanel JSON |
CVE-2019-20493 |
|
Privilege Escalation |
cPanel Log |
CVE-2019-20496 |
|
Privilege Escalation |
cPanel Market UAPI Namespace |
CVE-2020-10117 |
|
Information Disclosure |
cPanel MySQL Dump |
CVE-2019-20495 |
|
unknown vulnerability |
cPanel Number Get |
CVE-2019-20494 |
|
Code Execution |
cPanel PassengerApps API |
CVE-2020-10121 |
|
Weak Authentication |
cPanel Password File |
CVE-2019-20492 |
|
Code Execution |
cPanel PowerDNS |
CVE-2020-10115 |
|
Remote Code Execution |
cPanel psrvd rsync Shell |
CVE-2020-10119 |
|
Cross Site Scripting |
cPanel Temporary Character-Set |
CVE-2020-10113 |
|
Weak Authentication |
cPanel WebDAV |
CVE-2019-20498 |
|
Privilege Escalation |
cPanel WebDisk UAPI |
CVE-2020-10116 |
|
Denial of Service |
cPanel WebMail |
CVE-2020-10122 |
|
Weak Authentication |
cPanel WebMail |
CVE-2019-20490 |
|
Privilege Escalation |
D-Link DAP-1650 Command |
CVE-2019-12767 |
|
Information Disclosure |
D-Link DSL-2875AL Web Management Server romfile.cfg |
CVE-2019-15655 |
|
Information Disclosure |
D-Link DSL-2875AL/DSL-2877AL Web Management Server index.asp |
CVE-2019-15656 |
|
Privilege Escalation |
docker-compose-remote-api exec |
CVE-2020-7606 |
|
Cross Site Scripting |
Dolibarr ERP CRM card.php |
CVE-2019-19211 |
|
Cross Site Scripting |
Dolibarr ERP CRM File Upload |
CVE-2019-19210 |
|
Cross Site Scripting |
Dolibarr ERP CRM fournisseurs.php |
CVE-2019-19212 |
|
SQL Injection |
Dolibarr ERP CRM |
CVE-2019-19209 |
|
unknown vulnerability |
dot Package Template Compiler Function() |
CVE-2020-8141 |
|
Weak Authentication |
Easy!Appointments Captcha |
CVE-2018-13060 |
|
Information Disclosure |
Easy!Appointments Hash |
CVE-2018-13063 |
|
Information Disclosure |
EasyBuild GitHub Integration Log |
CVE-2020-5262 |
|
Weak Authentication |
Entrust Entelligence Security Provider SSL Certificate Validator |
CVE-2020-10659 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20521 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20520 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20518 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20517 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20516 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20515 |
|
Cross Site Scripting |
ERPNext |
CVE-2019-20514 |
|
Cross Site Scripting |
ERPNext Email Address |
CVE-2019-20519 |
|
Privilege Escalation |
Fortinet FortiClient EMS Online Installer FortiClientEMSOnlineInstaller.exe |
CVE-2020-9287 |
|
Privilege Escalation |
Fortinet FortiClient Online Installer FortiClientOnlineInstaller.exe |
CVE-2020-9290 |
|
Open Redirect |
Fortinet FortiOS URL |
CVE-2019-6696 |
|
Cross Site Scripting |
Fortinet FortiWeb Disclaimer Description Stored |
CVE-2020-6646 |
|
Information Disclosure |
Foxit Studio Photo EPS File |
CVE-2020-8883 |
|
Information Disclosure |
Foxit Studio Photo PSD File |
CVE-2020-8879 |
|
Information Disclosure |
Foxit Studio Photo PSD File |
CVE-2020-8877 |
|
Privilege Escalation |
Foxit Studio Photo PSD File |
CVE-2020-8882 |
|
Privilege Escalation |
Foxit Studio Photo PSD File |
CVE-2020-8878 |
|
Privilege Escalation |
Foxit Studio Photo tif File |
CVE-2020-8881 |
|
Privilege Escalation |
Foxit Studio Photo tif File |
CVE-2020-8880 |
|
Information Disclosure |
FreeRADIUS EAP-PWD eap_pwd.c |
CVE-2019-20510 |
|
Denial of Service |
FreeRADIUS EAP-PWD Module Crash |
CVE-2019-17185 |
|
Server-Side Request Forgery |
Ghost CMS |
CVE-2020-8134 |
|
Memory Corruption |
GNOME gThumb cairo-image-surface-jpeg.c _cairo_image_surface_create_from_jpeg() |
CVE-2019-20326 |
|
Weak Authentication |
GnuPG SHA1 |
CVE-2019-14855 |
|
Denial of Service |
Golang Facebook Thrift Server Memory Exhaustion |
CVE-2019-11939 |
|
Privilege Escalation |
Google Android App Uninstallation |
CVE-2019-2089 |
|
Information Disclosure |
Google Android Bluetooth Out-of-Bounds |
CVE-2019-9474 |
|
Information Disclosure |
Google Android Bluetooth Out-of-Bounds |
CVE-2019-9473 |
|
Denial of Service |
Google Android MPEG4Extractor.cpp parseTrackFragmentRun |
CVE-2020-0088 |
|
spoofing |
Google Android Notifications |
CVE-2019-2216 |
|
Memory Corruption |
Google Android Parcel.cpp readCString |
CVE-2020-0086 |
|
Denial of Service |
Google Go X.509 Certificate |
CVE-2020-7919 |
|
Command Injection |
gulp-scss-lint command.js |
CVE-2020-7601 |
|
Privilege Escalation |
gulp-styledocco Export index.js |
CVE-2020-7607 |
|
Privilege Escalation |
gulp-tape |
CVE-2020-7605 |
|
Open Redirect |
Halvotec RAQuest Admin Application |
CVE-2019-19613 |
|
Weak Authentication |
Halvotec RAQuest Session Fixation |
CVE-2019-19610 |
|
Cross Site Scripting |
Halvotec RAQuest Stored |
CVE-2019-19612 |
|
Weak Authentication |
HP Printer Lockout |
CVE-2019-18917 |
|
Memory Corruption |
Huawei CampusInsight/ManageOne Double-Free |
CVE-2020-1862 |
|
Privilege Escalation |
Huawei HEGE-560 Integrity Check |
CVE-2020-1879 |
|
Weak Authentication |
Huawei Mate 20/Mate 30 Pro Applock |
CVE-2020-1793 |
|
Privilege Escalation |
Huawei Mate 20/Mate 30 Pro Authorization |
CVE-2020-1796 |
|
Privilege Escalation |
Huawei Mate 20/Mate 30 Pro Digital Balance |
CVE-2020-1795 |
|
Weak Authentication |
Huawei Mate 20/Mate 30 Pro |
CVE-2020-1794 |
|
Information Disclosure |
Huawei Secospace AntiDDoS8000 |
CVE-2020-1864 |
|
Weak Authentication |
Huawei Smartphone OxfordS-AN00A |
CVE-2020-1878 |
|
Weak Authentication |
IBM Cloud Automation Manager Session Fixation |
CVE-2019-4617 |
|
Information Disclosure |
IBM DataPower Gateway Access Control |
CVE-2020-4203 |
|
Privilege Escalation |
IBM DataPower Gateway |
CVE-2020-4205 |
|
Information Disclosure |
IBM MQ/MQ Appliance |
CVE-2019-4719 |
|
Information Disclosure |
IBM MQ/MQ Appliance |
CVE-2019-4619 |
|
Denial of Service |
IBM MQ/MQ Appliance Queue Crash |
CVE-2019-4656 |
|
Cross Site Scripting |
Ignite Realtime Openfire setup-datasource-standard.jsp |
CVE-2019-20527 |
|
Cross Site Scripting |
Ignite Realtime Openfire setup-datasource-standard.jsp |
CVE-2019-20526 |
|
Cross Site Scripting |
Ignite Realtime Openfire setup-datasource-standard.jsp |
CVE-2019-20525 |
|
unknown vulnerability |
JFrog Artifactory Import |
CVE-2019-19937 |
|
Privilege Escalation |
Joomla CMS com_fields |
CVE-2020-10239 |
|
Cross Site Request Forgery |
Joomla CMS com_templates |
CVE-2020-10241 |
|
Privilege Escalation |
Joomla CMS com_templates |
CVE-2020-10238 |
|
Cross Site Scripting |
Joomla CMS Protostar/Beez3 |
CVE-2020-10242 |
|
SQL Injection |
Joomla CMS |
CVE-2020-10243 |
|
Privilege Escalation |
Joomla CMS User Table |
CVE-2020-10240 |
|
Privilege Escalation |
LearnPress Plugin Permission Check class-lp-admin-ajax.php be_teacher |
CVE-2020-7916 |
|
Denial of Service |
libvirt Monitor Job qemu_driver.c |
CVE-2019-20485 |
|
Privilege Escalation |
Liferay Portal JSONWS Deserialization |
CVE-2020-7961 |
|
Cross Site Scripting |
LimeSurvey Boxes box.php |
CVE-2019-14512 |
|
unknown vulnerability |
LINBIT csync2 SSL daemon.c csync_daemon_session |
CVE-2019-15522 |
|
Privilege Escalation |
LogicalDOC File Upload Command |
CVE-2020-9423 |
|
Privilege Escalation |
Micro Focus Service Manager Login Filter |
CVE-2020-9518 |
|
Information Disclosure |
Micro Focus Service Manager Web Services Config |
CVE-2020-9519 |
|
Privilege Escalation |
Mitsubishi Electric MELQIC IU1 TCP Argument Injection |
CVE-2020-5546 |
|
Memory Corruption |
Mitsubishi Electric MELQIC IU1 TCP |
CVE-2020-5542 |
|
Denial of Service |
Mitsubishi Electric MELQIC IU1 TCP NULL Pointer Dereference |
CVE-2020-5544 |
|
Privilege Escalation |
Mitsubishi Electric MELQIC IU1 TCP |
CVE-2020-5547 |
|
Privilege Escalation |
Mitsubishi Electric MELQIC IU1 TCP |
CVE-2020-5545 |
|
Privilege Escalation |
Mitsubishi Electric MELQIC IU1 TCP Session |
CVE-2020-5543 |
|
Cross Site Scripting |
MobileFrontend Extension Watchlist Feed |
CVE-2019-15124 |
|
Privilege Escalation |
Nagios Log Server Access Control |
CVE-2020-6584 |
|
Cross Site Request Forgery |
Nagios Log Server |
CVE-2020-6585 |
|
Cross Site Scripting |
Nagios Log Server profile |
CVE-2020-6586 |
|
Command Injection |
Nagios NRPE Filter |
CVE-2020-6581 |
|
Memory Corruption |
Nagios NRPE Heap-based |
CVE-2020-6582 |
|
Privilege Escalation |
NETSAS Enigma NMS CGI Script OS |
CVE-2019-16072 |
|
Directory Traversal |
NETSAS Enigma NMS |
CVE-2019-16064 |
|
Code Execution |
NETSAS Enigma NMS File Upload |
CVE-2019-16066 |
|
Cross Site Request Forgery |
NETSAS Enigma NMS manage_files.cgi |
CVE-2019-16068 |
|
SQL Injection |
NETSAS Enigma NMS manage_hosts_short.cgi |
CVE-2019-16065 |
|
Privilege Escalation |
NETSAS Enigma NMS |
CVE-2019-16071 |
|
Privilege Escalation |
NETSAS Enigma NMS |
CVE-2019-16061 |
|
Cross Site Scripting |
NETSAS Enigma NMS SNMP Stored |
CVE-2019-16069 |
|
Weak Encryption |
NETSAS Enigma NMS |
CVE-2019-16062 |
|
Weak Encryption |
NETSAS Enigma NMS Web Application Cleartext |
CVE-2019-16067 |
|
Cross Site Scripting |
NETSAS Enigma NMS Web Application Form Stored |
CVE-2019-16070 |
|
Weak Encryption |
NETSAS Enigma NMS Web Page Renderer |
CVE-2019-16063 |
|
Denial of Service |
Newlib libc Library _dtoa_r |
CVE-2019-14872 |
|
Denial of Service |
Newlib libc Library mprec.c __d2b |
CVE-2019-14878 |
|
Denial of Service |
Newlib libc Library mprec.c __i2b |
CVE-2019-14874 |
|
Denial of Service |
Newlib libc Library mprec.c __lshift |
CVE-2019-14876 |
|
Denial of Service |
Newlib libc Library mprec.c __mdiff |
CVE-2019-14877 |
|
Denial of Service |
Newlib libc Library mprec.c __multadd |
CVE-2019-14873 |
|
Denial of Service |
Newlib libc Library mprec.c __multiply |
CVE-2019-14875 |
|
Privilege Escalation |
Nextcloud Desktop Client Code Injection |
CVE-2020-8140 |
|
Information Disclosure |
Nextcloud Server Access Control download |
CVE-2020-8139 |
|
Server-Side Request Forgery |
Nextcloud Server IPv6 |
CVE-2020-8138 |
|
Privilege Escalation |
node-prompt-here manager.js runCommand() |
CVE-2020-7602 |
|
Privilege Escalation |
Octopus Deploy On-Premise Active Directory |
CVE-2020-10678 |
|
Privilege Escalation |
ONAP Operations Manager DCAE |
CVE-2019-12126 |
|
Privilege Escalation |
ONAP Operations Manager Logging |
CVE-2019-12125 |
|
Privilege Escalation |
ONAP Operations Manager |
CVE-2019-12130 |
|
Privilege Escalation |
ONAP Operations Manager |
CVE-2019-12129 |
|
Privilege Escalation |
ONAP Operations Manager |
CVE-2019-12128 |
|
Privilege Escalation |
ONAP Operations Manager |
CVE-2019-12127 |
|
Weak Authentication |
OPC Foundation OPC UA .NET Standard Random Generator |
CVE-2019-19135 |
|
Cross Site Scripting |
Open edX Ironwood.1 certificates |
CVE-2019-20513 |
|
Cross Site Scripting |
Open Ticket Request System |
CVE-2019-16375 |
|
Cross Site Scripting |
OpenCart Image Upload |
CVE-2020-10596 |
|
Privilege Escalation |
openITCOCKPIT DEVELOPMENT |
CVE-2020-10792 |
|
Privilege Escalation |
Openshift MediaWiki |
CVE-2020-1709 |
|
Privilege Escalation |
Openshift mediawiki-apb |
CVE-2019-19345 |
|
Privilege Escalation |
Openshift postgresql-apb |
CVE-2020-1707 |
|
Privilege Escalation |
Openshift template-service-broker-operator |
CVE-2020-1705 |
|
Memory Corruption |
OpenWrt libubox Stack-based |
CVE-2020-7248 |
|
Denial of Service |
OpenWrt uhttpd Out-of-Bounds |
CVE-2019-19945 |
|
Weak Authentication |
OpenWrt/LEDE opkg Package Manager |
CVE-2020-7982 |
|
unknown vulnerability |
phpBB CSS |
CVE-2019-16108 |
|
Cross Site Scripting |
pki-core KRA Agent Service Reflected |
CVE-2019-10179 |
|
Cross Site Scripting |
pki-core pki-ca Module Reflected |
CVE-2019-10221 |
|
Cross Site Scripting |
pki-core Token Processing Service Stored |
CVE-2020-1696 |
|
Privilege Escalation |
PostgreSQL ALTER |
CVE-2020-1720 |
|
Remote Code Execution |
PRTG Network Monitor HttpTransactionSensor.exe |
CVE-2019-11073 |
|
Privilege Escalation |
PRTG Network Monitor phantomjs.exe |
CVE-2019-11074 |
|
Privilege Escalation |
pulverizr job.js |
CVE-2020-7604 |
|
Code Execution |
Pydio Core/Enterprise HttpDownload.php |
CVE-2019-20453 |
|
Code Execution |
Pydio Core/Enterprise RecycleBinManager.php |
CVE-2019-20452 |
|
Cross Site Scripting |
RainLoop Webmail XSS Protection Mechanism |
CVE-2019-13389 |
|
Information Disclosure |
rConfig head.inc.php |
CVE-2020-9425 |
|
Information Disclosure |
Rivet Killer Control Center KfeCo10X64.sys |
CVE-2019-15662 |
|
Memory Corruption |
Rivet Killer Control Center KfeCo10X64.sys |
CVE-2019-15665 |
|
Memory Corruption |
Rivet Killer Control Center KfeCo10X64.sys |
CVE-2019-15664 |
|
Memory Corruption |
Rivet Killer Control Center KfeCo10X64.sys |
CVE-2019-15663 |
|
Memory Corruption |
Rivet Killer Control Center KfeCo10X64.sys |
CVE-2019-15661 |
|
SQL Injection |
RMySQL |
CVE-2020-10380 |
|
Information Disclosure |
Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 Credentials |
CVE-2020-6980 |
|
Weak Encryption |
Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 Default Key |
CVE-2020-6990 |
|
Weak Authentication |
Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 |
CVE-2020-6988 |
|
Weak Encryption |
Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 |
CVE-2020-6984 |
|
Cross Site Scripting |
Sangoma FreePBX/PBXact Call Event Logger |
CVE-2019-19852 |
|
Cross Site Scripting |
Sangoma FreePBX/PBXact Superfecta Module |
CVE-2019-19851 |
|
Privilege Escalation |
Sangoma FreePBX/sysadmin |
CVE-2019-19538 |
|
Cross Site Scripting |
Simple Link Directory Plugin qcopd-shortcode-generator.php get_the_title() |
CVE-2019-13463 |
|
Server-Side Request Forgery |
Simple Machines Forum Subs-Package.php |
CVE-2019-11574 |
|
unknown vulnerability |
Squid Web Proxy cachemgr.cgi |
CVE-2019-18860 |
|
unknown vulnerability |
SuiteCRM API |
CVE-2019-18785 |
|
Privilege Escalation |
SuiteCRM htaccess |
CVE-2019-18782 |
|
SQL Injection |
SuiteCRM |
CVE-2020-8786 |
|
SQL Injection |
SuiteCRM |
CVE-2020-8785 |
|
SQL Injection |
SuiteCRM |
CVE-2020-8784 |
|
SQL Injection |
SuiteCRM |
CVE-2020-8783 |
|
unknown vulnerability |
SuiteCRM |
CVE-2020-8787 |
|
XML External Entity |
svglib Package svg2rlg |
CVE-2020-10799 |
|
Cross Site Scripting |
Swisscom Centro Grande |
CVE-2019-19941 |
|
Command Injection |
Swisscom Centro Grande Telnet/SSH |
CVE-2019-19940 |
|
spoofing |
Swisscom Centro Grande/Centro Business Web Interface |
CVE-2019-19942 |
|
Remote Code Execution |
Systech NDS-5000/NDS-5008 |
CVE-2020-7006 |
|
Memory Corruption |
tcpdump extract.h rx_cache_find |
CVE-2018-19325 |
|
Denial of Service |
Trend Micro Apex One DLL |
CVE-2020-8470 |
|
Privilege Escalation |
Trend Micro Apex One DLL |
CVE-2020-8598 |
|
Privilege Escalation |
Trend Micro Apex One |
CVE-2020-8468 |
|
Privilege Escalation |
Trend Micro Apex One/OfficeScan XG Migration Tool |
CVE-2020-8467 |
|
Privilege Escalation |
Trend Micro Apex One/OfficeScan XG |
CVE-2020-8599 |
|
Directory Traversal |
Trend Micro Worry-Free Business Security |
CVE-2020-8600 |
|
Code Execution |
Umbraco Cloud File Upload |
CVE-2020-9471 |
|
Code Execution |
Umbraco CMS File Upload |
CVE-2020-9472 |
|
Denial of Service |
UniValue read() |
CVE-2019-18936 |
|
Remote Code Execution |
Unraid |
CVE-2020-5847 |
|
Weak Authentication |
Unraid |
CVE-2020-5849 |
|
Privilege Escalation |
VMware Fusion Binary |
CVE-2020-3950 |
|
Privilege Escalation |
VMware Horizon Client/Remote Console/Workstation |
CVE-2019-5543 |
|
Privilege Escalation |
VMware Workstation/Fusion Cortado Thinprint |
CVE-2020-3948 |
|
Memory Corruption |
VMware Workstation/Fusion vmnetdhcp |
CVE-2020-3947 |
|
Denial of Service |
VMware Workstation/Horizon Client Cortado Thinprint Heap-based |
CVE-2020-3951 |
|
Privilege Escalation |
Walmart Labs Concord apikey |
CVE-2020-10591 |
|
Weak Encryption |
WildFly TLS Downgrade |
CVE-2019-14887 |
|
Privilege Escalation |
WP Live Chat Support REST API |
CVE-2019-12498 |
|
unknown vulnerability |
Xmidt cjwt |
CVE-2019-19324 |
|
Privilege Escalation |
yargs-parser |
CVE-2020-7608 |
|
Cross Site Request Forgery |
Zoho ManageEngine Password Manager Pro |
CVE-2020-9346 |
|
Privilege Escalation |
Zoho ManageEngine Password Manager Pro Excel Macro CSV Injection |
CVE-2020-9347 |
|
Privilege Escalation |
Zoho ManageEngine Remote Access Plus User Permission |
CVE-2019-11361 |
