concrete5 up to 8.5.2 File Manager PHP File PHP Code Execution privilege escalation (CVE-2020-24986)
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in concrete5 up to 8.5.2. Affected by this issue is an unknown code block of the component File Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Yodobashi App up to 1.8.7 on Android privilege escalation (CVE-2020-5627)
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Yodobashi App up to 1.8.7 on Android (Android App Software). This affects an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Qualcomm Snapdragon Auto up to SXR2130 ASLR privilege escalation (CVE-2020-3679)
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wired Infrastructure and Networking (Chip Software). Affected is some unknown functionality of the component ASLR Handler. Upgrading eliminates this vulnerability.
Level: 5.5
McAfee MVision Endpoint up to 20.8 Symbolic Links privilege escalation (CVE-2020-7325)
Summary: A vulnerability, which was classified as critical, has been found in McAfee MVision Endpoint up to 20.8. This issue affects an unknown functionality of the component Symbolic Links Handler. Upgrading to version 20.9 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, has been found in McAfee MVision Endpoint up to 20.8. This issue affects an unknown functionality of the component Symbolic Links Handler. Upgrading to version 20.9 eliminates this vulnerability.
Level: 5.3
Linux Kernel up to 4.9.232/4.14.193/4.19.139 Patch CVE-2020-14356 Use-After-Free memory corruption (CVE-2020-25220)
Summary: A vulnerability classified as critical has been found in Linux Kernel up to 4.9.232/4.14.193/4.19.139 (Operating System). This affects an unknown function of the component Patch CVE-2020-14356. Upgrading to version 4.9.233, 4.14.194 or 4.19.140 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Linux Kernel up to 4.9.232/4.14.193/4.19.139 (Operating System). This affects an unknown function of the component Patch CVE-2020-14356. Upgrading to version 4.9.233, 4.14.194 or 4.19.140 eliminates this vulnerability.
Level: 5.5
Twilio Authy up to 24.3.6 on Android weak authentication (CVE-2020-24655)
Summary: A vulnerability was found in Twilio Authy up to 24.3.6 on Android (Android App Software). It has been rated as critical. Affected by this issue is some unknown processing. Upgrading to version 24.3.7 eliminates this vulnerability.
Level: 4.3
Summary: A vulnerability was found in Twilio Authy up to 24.3.6 on Android (Android App Software). It has been rated as critical. Affected by this issue is some unknown processing. Upgrading to version 24.3.7 eliminates this vulnerability.
Level: 4.3
Hyland OnBase up to 18.0.0.32/19.8.9.1000 JSON Deserialization privilege escalation (CVE-2020-25260)
Summary: A vulnerability classified as critical has been found in Hyland OnBase up to 18.0.0.32/19.8.9.1000. This affects an unknown functionality of the component JSON Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability classified as critical has been found in Hyland OnBase up to 18.0.0.32/19.8.9.1000. This affects an unknown functionality of the component JSON Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Google Chrome prior 85.0.4183.102 Policy privilege escalation (CVE-2020-15959)
Summary: A vulnerability classified as critical has been found in Google Chrome (Web Browser). Affected is an unknown function of the component Policy Handler. Upgrading to version 85.0.4183.102 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Google Chrome (Web Browser). Affected is an unknown function of the component Policy Handler. Upgrading to version 85.0.4183.102 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
LG Mobile Devices 8.0/8.1/9.0/10 BT Manager privilege escalation (CVE-2020-25283)
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Backblaze prior 7.0.0.439 privilege escalation (CVE-2020-8152)
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8
LG Mobile Devices 8.0/8.1/9.0/10 BT Manager privilege escalation (CVE-2020-25283)
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Wibu-Systems CodeMeter privilege escalation (CVE-2020-14515)
Summary: A vulnerability classified as critical has been found in Wibu-Systems CodeMeter (version unknown). Affected is an unknown code. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Wibu-Systems CodeMeter (version unknown). Affected is an unknown code. Upgrading eliminates this vulnerability.
Level: 5.5
Kingsoft WPS Office prior 11.2.0.9403 GdiDrawHoriLineIAlt gui/painting/qbrush.cpp QBrush::setMatrix Word Document Heap-based memory corruption (CVE-2020-25291)
Summary: A vulnerability was found in Kingsoft WPS Office (Office Suite Software). It has been declared as critical. Affected by this vulnerability is the function QBrush::setMatrix of the file gui/painting/qbrush.cpp of the component GdiDrawHoriLineIAlt. Upgrading to version 11.2.0.9403 eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability was found in Kingsoft WPS Office (Office Suite Software). It has been declared as critical. Affected by this vulnerability is the function QBrush::setMatrix of the file gui/painting/qbrush.cpp of the component GdiDrawHoriLineIAlt. Upgrading to version 11.2.0.9403 eliminates this vulnerability.
Level: 6.3
Avast SecureLine prior 5.6.4982.470 VPN Service Symlink privilege escalation (CVE-2020-25289)
Summary: A vulnerability was found in Avast SecureLine. It has been classified as critical. Affected is an unknown part of the component VPN Service. Upgrading to version 5.6.4982.470 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability was found in Avast SecureLine. It has been classified as critical. Affected is an unknown part of the component VPN Service. Upgrading to version 5.6.4982.470 eliminates this vulnerability.
Level: 5.3
Mike Rooijackers Recall Products 0.8 on WordPress Manufacturer[] sql injection (CVE-2020-25379)
Summary: A vulnerability was found in Mike Rooijackers Recall Products 0.8 on WordPress (WordPress Plugin). It has been declared as critical. Affected by this vulnerability is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Mike Rooijackers Recall Products 0.8 on WordPress (WordPress Plugin). It has been declared as critical. Affected by this vulnerability is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
failure Crate up to 0.1.5 on Rust Type Confusion unknown vulnerability (CVE-2020-25575)
Summary: A vulnerability, which was classified as critical, has been found in failure Crate up to 0.1.5 on Rust (Rust Package). The problem might be mitigated by replacing the product with as an alternative.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in failure Crate up to 0.1.5 on Rust (Rust Package). The problem might be mitigated by replacing the product with as an alternative.
Level: 5.5
McAfee Web Gateway up to 9.2.0 Access Control privilege escalation (CVE-2020-7297)
Summary: A vulnerability, which was classified as critical, was found in McAfee Web Gateway up to 9.2.0 (Firewall Software). Affected is an unknown code block of the component Access Control. Upgrading to version 9.2.1 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in McAfee Web Gateway up to 9.2.0 (Firewall Software). Affected is an unknown code block of the component Access Control. Upgrading to version 9.2.1 eliminates this vulnerability.
Level: 5.5
McAfee Email Gateway prior 7.6.406 directory traversal (CVE-2020-7268)
Summary: A vulnerability, which was classified as critical, has been found in McAfee Email Gateway. This issue affects an unknown code. Upgrading to version 7.6.406 eliminates this vulnerability.
Level: 4.3
Summary: A vulnerability, which was classified as critical, has been found in McAfee Email Gateway. This issue affects an unknown code. Upgrading to version 7.6.406 eliminates this vulnerability.
Level: 4.3
Storable Configs Plugin up to 1.0 on Jenkins Permission privilege escalation (CVE-2020-2277)
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Adobe Media Encoder up to 14.3.2 Out-of-Bounds memory corruption (CVE-2020-9745)
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3