Adobe Lightroom up to 9.2.0.10 Library Loader privilege escalation (CVE-2020-9724)
Summary: A vulnerability classified as critical was found in Adobe Lightroom up to 9.2.0.10. This vulnerability affects an unknown function of the component Library Loader. Upgrading eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability classified as critical was found in Adobe Lightroom up to 9.2.0.10. This vulnerability affects an unknown function of the component Library Loader. Upgrading eliminates this vulnerability.
Level: 5.3
IBM Planning Analytics 2.0 Avatar privilege escalation (CVE-2020-4648)
Summary: A vulnerability was found in IBM Planning Analytics 2.0. It has been rated as critical. Affected by this issue is an unknown code block of the component Avatar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in IBM Planning Analytics 2.0. It has been rated as critical. Affected by this issue is an unknown code block of the component Avatar Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Foxit Studio Photo 3.6.6.916 tif File GetTIFPalette memory corruption (CVE-2020-8870)
Summary: A vulnerability was found in Foxit Studio Photo 3.6.6.916. It has been declared as critical. This vulnerability affects the function GetTIFPalette of the component tif File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Foxit Studio Photo 3.6.6.916. It has been declared as critical. This vulnerability affects the function GetTIFPalette of the component tif File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Seowon Intech SLC-130/SLR-120S system_log.cgi ipAddr Code Execution (CVE-2020-17456)
Summary: A vulnerability was found in Seowon Intech SLC-130 and SLR-120S (affected version not known) and classified as critical. Affected by this issue is an unknown functionality of the file system_log.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability was found in Seowon Intech SLC-130 and SLR-120S (affected version not known) and classified as critical. Affected by this issue is an unknown functionality of the file system_log.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
net-snmp up to 5.7.3 Privilege Management privilege escalation (CVE-2020-15862)
Summary: A vulnerability has been found in net-snmp up to 5.7.3 (Network Management Software) and classified as critical. Affected by this vulnerability is an unknown function of the component Privilege Management. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Summary: A vulnerability has been found in net-snmp up to 5.7.3 (Network Management Software) and classified as critical. Affected by this vulnerability is an unknown function of the component Privilege Management. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Cisco Data Center Network Manager prior 11.4(1) directory traversal (CVE-2020-3538)
Summary: A vulnerability classified as critical has been found in Cisco Data Center Network Manager. This affects an unknown functionality. Upgrading to version 11.4(1) eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Cisco Data Center Network Manager. This affects an unknown functionality. Upgrading to version 11.4(1) eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
NAB Transact WooCommerce Plugin 2.1.0 on Wordpress privilege escalation (CVE-2020-11497)
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
NAB Transact WooCommerce Plugin 2.1.0 on Wordpress privilege escalation (CVE-2020-11497)
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Rapid7 Metasploit Framework telpho10_credential_dump untar directory traversal (CVE-2020-7377)
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
openSIS Community Edition 7.3 index.php USERNAME sql injection (CVE-2020-6637)
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Rapid7 Metasploit Framework telpho10_credential_dump untar directory traversal (CVE-2020-7377)
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
openSIS Community Edition 7.3 index.php USERNAME sql injection (CVE-2020-6637)
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Ansible Engine up to 2.7.15/2.8.7/2.9.2 solaris_zone command injection (CVE-2019-14904)
Summary: A vulnerability was found in Ansible Engine up to 2.7.15/2.8.7/2.9.2 and classified as critical. This issue affects an unknown code block of the component solaris_zone. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability was found in Ansible Engine up to 2.7.15/2.8.7/2.9.2 and classified as critical. This issue affects an unknown code block of the component solaris_zone. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Oracle NetSuite prior 2020.1.4 SuiteCommerce Advanced privilege escalation (CVE-2020-14729)
Summary: A vulnerability has been found in Oracle NetSuite and classified as critical. Affected by this vulnerability is an unknown functionality of the component SuiteCommerce Advanced. Upgrading to version 2020.1.4 eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability has been found in Oracle NetSuite and classified as critical. Affected by this vulnerability is an unknown functionality of the component SuiteCommerce Advanced. Upgrading to version 2020.1.4 eliminates this vulnerability.
Level: 4.6
F5 BIG-IP/BIG-IP Virtual Edition Session Initiation Protocol SIP Message memory corruption (CVE-2020-5926)
Summary: A vulnerability classified as critical has been found in F5 BIG-IP and BIG-IP Virtual Edition (Firewall Software) (the affected version unknown). This affects an unknown code of the component Session Initiation Protocol. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in F5 BIG-IP and BIG-IP Virtual Edition (Firewall Software) (the affected version unknown). This affects an unknown code of the component Session Initiation Protocol. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Trend Micro Micro Deep Security/Vulnerability Protection Management Console Remote Code Execution (CVE-2020-8602)
Summary: A vulnerability, which was classified as critical, has been found in Trend Micro Micro Deep Security and Vulnerability Protection (unknown version). This issue affects an unknown code of the component Management Console. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, has been found in Trend Micro Micro Deep Security and Vulnerability Protection (unknown version). This issue affects an unknown code of the component Management Console. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Dell EMC Isilon OneFS/EMC PowerScale OneFS Likewise memory corruption (CVE-2020-5383)
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Netflix Spinnaker up to 8.6.x Server-Side Request Forgery (CVE-2020-9298)
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5