Zoom Client up to 5.0.4 Sharing Service privilege escalation (CVE-2020-9767)
Summary: A vulnerability has been found in Zoom Client up to 5.0.4 (Unified Communication Software) and classified as critical. This vulnerability affects some unknown functionality of the component Sharing Service. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.3
Summary: A vulnerability has been found in Zoom Client up to 5.0.4 (Unified Communication Software) and classified as critical. This vulnerability affects some unknown functionality of the component Sharing Service. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.3
SNMPTT up to 1.4.1 EXEC/PREXEC/unknown_trap_exec Shell privilege escalation (CVE-2020-24361)
Summary: A vulnerability, which was classified as critical, was found in SNMPTT up to 1.4.1. This affects the function EXEC/PREXEC/unknown_trap_exec. Upgrading to version 1.4.2 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in SNMPTT up to 1.4.1. This affects the function EXEC/PREXEC/unknown_trap_exec. Upgrading to version 1.4.2 eliminates this vulnerability.
Level: 5.5
MEGVII Koala 2.9.1-c3s Service Port 5000 Packet weak authentication (CVE-2020-17475)
Summary: A vulnerability, which was classified as critical, has been found in MEGVII Koala 2.9.1-c3s. Affected by this issue is an unknown function of the component Service Port 5000. Addressing this vulnerability is possible by firewalling udp/5000.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in MEGVII Koala 2.9.1-c3s. Affected by this issue is an unknown function of the component Service Port 5000. Addressing this vulnerability is possible by firewalling udp/5000.
Level: 5.5
ZKTeco FaceDepot 7B/ZKBiosecurity Server Token privilege escalation (CVE-2020-17474)
Summary: A vulnerability classified as critical was found in ZKTeco FaceDepot 7B and ZKBiosecurity Server (affected version unknown). Affected by this vulnerability is some unknown processing. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical was found in ZKTeco FaceDepot 7B and ZKBiosecurity Server (affected version unknown). Affected by this vulnerability is some unknown processing. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
MINMAX /newsDia.php id sql injection (NON-CVE-159957)
Summary: A vulnerability classified as critical has been found in MINMAX (the affected version unknown). This affects an unknown function of the file /newsDia.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability classified as critical has been found in MINMAX (the affected version unknown). This affects an unknown function of the file /newsDia.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Brandbugle /main.php sql injection (NON-CVE-159956)
Summary: A vulnerability was found in Brandbugle (affected version not known). It has been rated as critical. Affected by this issue is some unknown processing of the file /main.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Brandbugle (affected version not known). It has been rated as critical. Affected by this issue is some unknown processing of the file /main.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Eatan CMS sql injection (NON-CVE-159955)
Summary: A vulnerability was found in Eatan CMS (Content Management System) (affected version unknown). It has been declared as critical. Affected by this vulnerability is an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Eatan CMS (Content Management System) (affected version unknown). It has been declared as critical. Affected by this vulnerability is an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Lógico y Creativo 1.0 id sql injection (NON-CVE-159953)
Summary: A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Google Chrome prior 84.0.4147.125 WebGL Out-of-Bounds memory corruption (CVE-2020-6555)
Summary: A vulnerability, which was classified as critical, was found in Google Chrome (Web Browser). Affected is an unknown function of the component WebGL. Upgrading to version 84.0.4147.125 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Google Chrome (Web Browser). Affected is an unknown function of the component WebGL. Upgrading to version 84.0.4147.125 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 6.3
Rob Evans irrelon-path up to 4.6.x set/unSet/pushVal/pullVal Prototype privilege escalation (CVE-2020-7708)
Summary: A vulnerability has been found in Rob Evans irrelon-path up to 4.6.x and classified as critical. This vulnerability affects the function set/unSet/pushVal/pullVal. Upgrading to version 4.7.0 eliminates this vulnerability.
Level: 7.3
Summary: A vulnerability has been found in Rob Evans irrelon-path up to 4.6.x and classified as critical. This vulnerability affects the function set/unSet/pushVal/pullVal. Upgrading to version 4.7.0 eliminates this vulnerability.
Level: 7.3
Linux Kernel up to 5.7.9 cgroupv2 Subsystem NULL Pointer Dereference privilege escalation (CVE-2020-14356)
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.7.9 (Operating System). This affects an unknown function of the component cgroupv2 Subsystem. Upgrading to version 5.7.10 eliminates this vulnerability.
Level: 4.4
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.7.9 (Operating System). This affects an unknown function of the component cgroupv2 Subsystem. Upgrading to version 5.7.10 eliminates this vulnerability.
Level: 4.4
Adobe Lightroom up to 9.2.0.10 Library Loader privilege escalation (CVE-2020-9724)
Summary: A vulnerability classified as critical was found in Adobe Lightroom up to 9.2.0.10. This vulnerability affects an unknown function of the component Library Loader. Upgrading eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability classified as critical was found in Adobe Lightroom up to 9.2.0.10. This vulnerability affects an unknown function of the component Library Loader. Upgrading eliminates this vulnerability.
Level: 5.3
IBM Planning Analytics 2.0 Avatar privilege escalation (CVE-2020-4648)
Summary: A vulnerability was found in IBM Planning Analytics 2.0. It has been rated as critical. Affected by this issue is an unknown code block of the component Avatar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in IBM Planning Analytics 2.0. It has been rated as critical. Affected by this issue is an unknown code block of the component Avatar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Foxit Studio Photo 3.6.6.916 tif File GetTIFPalette memory corruption (CVE-2020-8870)
Summary: A vulnerability was found in Foxit Studio Photo 3.6.6.916. It has been declared as critical. This vulnerability affects the function GetTIFPalette of the component tif File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Foxit Studio Photo 3.6.6.916. It has been declared as critical. This vulnerability affects the function GetTIFPalette of the component tif File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Seowon Intech SLC-130/SLR-120S system_log.cgi ipAddr Code Execution (CVE-2020-17456)
Summary: A vulnerability was found in Seowon Intech SLC-130 and SLR-120S (affected version not known) and classified as critical. Affected by this issue is an unknown functionality of the file system_log.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability was found in Seowon Intech SLC-130 and SLR-120S (affected version not known) and classified as critical. Affected by this issue is an unknown functionality of the file system_log.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
net-snmp up to 5.7.3 Privilege Management privilege escalation (CVE-2020-15862)
Summary: A vulnerability has been found in net-snmp up to 5.7.3 (Network Management Software) and classified as critical. Affected by this vulnerability is an unknown function of the component Privilege Management. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Summary: A vulnerability has been found in net-snmp up to 5.7.3 (Network Management Software) and classified as critical. Affected by this vulnerability is an unknown function of the component Privilege Management. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Cisco Data Center Network Manager prior 11.4(1) directory traversal (CVE-2020-3538)
Summary: A vulnerability classified as critical has been found in Cisco Data Center Network Manager. This affects an unknown functionality. Upgrading to version 11.4(1) eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Cisco Data Center Network Manager. This affects an unknown functionality. Upgrading to version 11.4(1) eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
NAB Transact WooCommerce Plugin 2.1.0 on Wordpress privilege escalation (CVE-2020-11497)
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
NAB Transact WooCommerce Plugin 2.1.0 on Wordpress privilege escalation (CVE-2020-11497)
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5