KDE ark up to 20.08.0 TAR Archive Symlink privilege escalation (CVE-2020-24654)
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 privilege escalation (CVE-2020-8576)
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
grunt Package up to 1.2.x load() Remote Code Execution (CVE-2020-7729)
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6
Huawei B2368-22/B2368-66 V100R001C00 Parameter command injection (CVE-2020-9199)
Summary: A vulnerability, which was classified as critical, was found in Huawei B2368-22 and B2368-66 V100R001C00. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in Huawei B2368-22 and B2368-66 V100R001C00. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Rapid7 Nexpose up to 6.6.39 Unquoted Search Path privilege escalation (CVE-2020-7382)
Summary: A vulnerability classified as critical was found in Rapid7 Nexpose up to 6.6.39. This vulnerability affects an unknown functionality of the component Unquoted Search Path. Upgrading to version 6.6.40 eliminates this vulnerability.
Level: 4.7
Summary: A vulnerability classified as critical was found in Rapid7 Nexpose up to 6.6.39. This vulnerability affects an unknown functionality of the component Unquoted Search Path. Upgrading to version 6.6.40 eliminates this vulnerability.
Level: 4.7
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Tenda AC18 up to V15.03.05.05_EN CN Authentication ngx_wdas.lua logincheck() Remote Code Execution (CVE-2020-24987)
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Tenda AC18 up to V15.03.05.05_EN CN. This affects the function logincheck() in the library /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the component Authentication. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Yodobashi App up to 1.8.7 on Android privilege escalation (CVE-2020-5627)
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Qualcomm Snapdragon Auto up to SXR2130 ASLR privilege escalation (CVE-2020-3679)
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5
McAfee MVision Endpoint up to 20.8 Symbolic Links privilege escalation (CVE-2020-7325)
Summary: A vulnerability, which was classified as critical, has been found in McAfee MVision Endpoint up to 20.8. This issue affects an unknown functionality of the component Symbolic Links Handler. Upgrading to version 20.9 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, has been found in McAfee MVision Endpoint up to 20.8. This issue affects an unknown functionality of the component Symbolic Links Handler. Upgrading to version 20.9 eliminates this vulnerability.
Level: 5.3
Linux Kernel up to 4.9.232/4.14.193/4.19.139 Patch CVE-2020-14356 Use-After-Free memory corruption (CVE-2020-25220)
Summary: A vulnerability classified as critical has been found in Linux Kernel up to 4.9.232/4.14.193/4.19.139 (Operating System). This affects an unknown function of the component Patch CVE-2020-14356. Upgrading to version 4.9.233, 4.14.194 or 4.19.140 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Linux Kernel up to 4.9.232/4.14.193/4.19.139 (Operating System). This affects an unknown function of the component Patch CVE-2020-14356. Upgrading to version 4.9.233, 4.14.194 or 4.19.140 eliminates this vulnerability.
Level: 5.5
Twilio Authy up to 24.3.6 on Android weak authentication (CVE-2020-24655)
Summary: A vulnerability was found in Twilio Authy up to 24.3.6 on Android (Android App Software). It has been rated as critical. Affected by this issue is some unknown processing. Upgrading to version 24.3.7 eliminates this vulnerability.
Level: 4.3
Summary: A vulnerability was found in Twilio Authy up to 24.3.6 on Android (Android App Software). It has been rated as critical. Affected by this issue is some unknown processing. Upgrading to version 24.3.7 eliminates this vulnerability.
Level: 4.3
Hyland OnBase up to 18.0.0.32/19.8.9.1000 JSON Deserialization privilege escalation (CVE-2020-25260)
Summary: A vulnerability classified as critical has been found in Hyland OnBase up to 18.0.0.32/19.8.9.1000. This affects an unknown functionality of the component JSON Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability classified as critical has been found in Hyland OnBase up to 18.0.0.32/19.8.9.1000. This affects an unknown functionality of the component JSON Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Google Chrome prior 85.0.4183.102 Policy privilege escalation (CVE-2020-15959)
Summary: A vulnerability classified as critical has been found in Google Chrome (Web Browser). Affected is an unknown function of the component Policy Handler. Upgrading to version 85.0.4183.102 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Google Chrome (Web Browser). Affected is an unknown function of the component Policy Handler. Upgrading to version 85.0.4183.102 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
LG Mobile Devices 8.0/8.1/9.0/10 BT Manager privilege escalation (CVE-2020-25283)
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Backblaze prior 7.0.0.439 privilege escalation (CVE-2020-8152)
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8