Dell EMC Isilon OneFS/EMC PowerScale OneFS Likewise memory corruption (CVE-2020-5383)
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Netflix Spinnaker up to 8.6.x Server-Side Request Forgery (CVE-2020-9298)
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5
Red Lion N-Tron 702-W/N-Tron 702M12-W privilege escalation (CVE-2017-16544)
Summary: A vulnerability was found in Red Lion N-Tron 702-W and N-Tron 702M12-W (affected version not known). It has been rated as critical. Affected by this issue is some unknown functionality. Addressing this vulnerability is possible by firewalling .
Level: 8.8
Summary: A vulnerability was found in Red Lion N-Tron 702-W and N-Tron 702M12-W (affected version not known). It has been rated as critical. Affected by this issue is some unknown functionality. Addressing this vulnerability is possible by firewalling .
Level: 8.8
bl up to 2.2.0/3.0.0/4.0.2 consume() Argument Uninitialized Memory memory corruption (CVE-2020-8244)
Summary: A vulnerability was found in bl up to 2.2.0/3.0.0/4.0.2. It has been declared as critical. This vulnerability affects the function consume(). Upgrading to version 2.2.1, 3.0.1 or 4.0.3 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability was found in bl up to 2.2.0/3.0.0/4.0.2. It has been declared as critical. This vulnerability affects the function consume(). Upgrading to version 2.2.1, 3.0.1 or 4.0.3 eliminates this vulnerability.
Level: 5.5
u-root tarutil directory traversal (CVE-2020-7669)
Summary: A vulnerability classified as critical has been found in u-root (version unknown). Affected is an unknown code block of the component tarutil. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability classified as critical has been found in u-root (version unknown). Affected is an unknown code block of the component tarutil. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
OS4Ed openSIS 7.3 MassDropModal.php id sql injection (CVE-2020-6134)
Summary: A vulnerability was found in OS4Ed openSIS 7.3. It has been classified as critical. This affects some unknown functionality of the file MassDropModal.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in OS4Ed openSIS 7.3. It has been classified as critical. This affects some unknown functionality of the file MassDropModal.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Trend Micro OfficeScan XG SP1 on Windows Hard Link Remote Code Execution (CVE-2020-24556)
Summary: A vulnerability, which was classified as critical, was found in Trend Micro OfficeScan XG SP1 on Windows. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Trend Micro OfficeScan XG SP1 on Windows. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
D-Link DCS-2530L/DCS-2670L cgi-bin/ddns_enc.cgi command injection (CVE-2020-25079)
Summary: A vulnerability has been found in D-Link DCS-2530L and DCS-2670L (the affected version is unknown) and classified as critical. This vulnerability affects an unknown function of the file cgi-bin/ddns_enc.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability has been found in D-Link DCS-2530L and DCS-2670L (the affected version is unknown) and classified as critical. This vulnerability affects an unknown function of the file cgi-bin/ddns_enc.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
KDE ark up to 20.08.0 TAR Archive Symlink privilege escalation (CVE-2020-24654)
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 privilege escalation (CVE-2020-8576)
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
grunt Package up to 1.2.x load() Remote Code Execution (CVE-2020-7729)
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6
Huawei B2368-22/B2368-66 V100R001C00 Parameter command injection (CVE-2020-9199)
Summary: A vulnerability, which was classified as critical, was found in Huawei B2368-22 and B2368-66 V100R001C00. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in Huawei B2368-22 and B2368-66 V100R001C00. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Rapid7 Nexpose up to 6.6.39 Unquoted Search Path privilege escalation (CVE-2020-7382)
Summary: A vulnerability classified as critical was found in Rapid7 Nexpose up to 6.6.39. This vulnerability affects an unknown functionality of the component Unquoted Search Path. Upgrading to version 6.6.40 eliminates this vulnerability.
Level: 4.7
Summary: A vulnerability classified as critical was found in Rapid7 Nexpose up to 6.6.39. This vulnerability affects an unknown functionality of the component Unquoted Search Path. Upgrading to version 6.6.40 eliminates this vulnerability.
Level: 4.7
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Yodobashi App up to 1.8.7 on Android privilege escalation (CVE-2020-5627)
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Qualcomm Snapdragon Auto up to SXR2130 ASLR privilege escalation (CVE-2020-3679)
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5