Backblaze prior 7.0.0.439 privilege escalation (CVE-2020-8152)
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8
Summary: A vulnerability has been found in Backblaze and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 7.0.0.439 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 8.8
LG Mobile Devices 8.0/8.1/9.0/10 BT Manager privilege escalation (CVE-2020-25283)
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical was found in LG Mobile Devices 8.0/8.1/9.0/10 (Smartphone Operating System). This vulnerability affects an unknown part of the component BT Manager. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Wibu-Systems CodeMeter privilege escalation (CVE-2020-14515)
Summary: A vulnerability classified as critical has been found in Wibu-Systems CodeMeter (version unknown). Affected is an unknown code. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Wibu-Systems CodeMeter (version unknown). Affected is an unknown code. Upgrading eliminates this vulnerability.
Level: 5.5
Kingsoft WPS Office prior 11.2.0.9403 GdiDrawHoriLineIAlt gui/painting/qbrush.cpp QBrush::setMatrix Word Document Heap-based memory corruption (CVE-2020-25291)
Summary: A vulnerability was found in Kingsoft WPS Office (Office Suite Software). It has been declared as critical. Affected by this vulnerability is the function QBrush::setMatrix of the file gui/painting/qbrush.cpp of the component GdiDrawHoriLineIAlt. Upgrading to version 11.2.0.9403 eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability was found in Kingsoft WPS Office (Office Suite Software). It has been declared as critical. Affected by this vulnerability is the function QBrush::setMatrix of the file gui/painting/qbrush.cpp of the component GdiDrawHoriLineIAlt. Upgrading to version 11.2.0.9403 eliminates this vulnerability.
Level: 6.3
Avast SecureLine prior 5.6.4982.470 VPN Service Symlink privilege escalation (CVE-2020-25289)
Summary: A vulnerability was found in Avast SecureLine. It has been classified as critical. Affected is an unknown part of the component VPN Service. Upgrading to version 5.6.4982.470 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability was found in Avast SecureLine. It has been classified as critical. Affected is an unknown part of the component VPN Service. Upgrading to version 5.6.4982.470 eliminates this vulnerability.
Level: 5.3
Mike Rooijackers Recall Products 0.8 on WordPress Manufacturer[] sql injection (CVE-2020-25379)
Summary: A vulnerability was found in Mike Rooijackers Recall Products 0.8 on WordPress (WordPress Plugin). It has been declared as critical. Affected by this vulnerability is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Mike Rooijackers Recall Products 0.8 on WordPress (WordPress Plugin). It has been declared as critical. Affected by this vulnerability is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
failure Crate up to 0.1.5 on Rust Type Confusion unknown vulnerability (CVE-2020-25575)
Summary: A vulnerability, which was classified as critical, has been found in failure Crate up to 0.1.5 on Rust (Rust Package). The problem might be mitigated by replacing the product with as an alternative.
Level: 5.5
Summary: A vulnerability, which was classified as critical, has been found in failure Crate up to 0.1.5 on Rust (Rust Package). The problem might be mitigated by replacing the product with as an alternative.
Level: 5.5
McAfee Web Gateway up to 9.2.0 Access Control privilege escalation (CVE-2020-7297)
Summary: A vulnerability, which was classified as critical, was found in McAfee Web Gateway up to 9.2.0 (Firewall Software). Affected is an unknown code block of the component Access Control. Upgrading to version 9.2.1 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in McAfee Web Gateway up to 9.2.0 (Firewall Software). Affected is an unknown code block of the component Access Control. Upgrading to version 9.2.1 eliminates this vulnerability.
Level: 5.5
McAfee Email Gateway prior 7.6.406 directory traversal (CVE-2020-7268)
Summary: A vulnerability, which was classified as critical, has been found in McAfee Email Gateway. This issue affects an unknown code. Upgrading to version 7.6.406 eliminates this vulnerability.
Level: 4.3
Summary: A vulnerability, which was classified as critical, has been found in McAfee Email Gateway. This issue affects an unknown code. Upgrading to version 7.6.406 eliminates this vulnerability.
Level: 4.3
Storable Configs Plugin up to 1.0 on Jenkins Permission privilege escalation (CVE-2020-2277)
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Adobe Media Encoder up to 14.3.2 Out-of-Bounds memory corruption (CVE-2020-9745)
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3
Huawei Taurus-AN00B prior 10.1.0.156(C00E155R7P2) Use-After-Free memory corruption (CVE-2020-9084)
Summary: A vulnerability was found in Huawei Taurus-AN00B and classified as critical. Affected by this issue is some unknown processing. Upgrading to version 10.1.0.156(C00E155R7P2) eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability was found in Huawei Taurus-AN00B and classified as critical. Affected by this issue is some unknown processing. Upgrading to version 10.1.0.156(C00E155R7P2) eliminates this vulnerability.
Level: 5.3
Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 weak authentication (CVE-2020-8253)
Summary: A vulnerability has been found in Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 (Connectivity Software) and classified as critical. Affected by this vulnerability is an unknown code block. Applying the patch 10.9 RP5/10.10 RP6/10.11 RP4/10.12 RP2 is able to eliminate this problem.
Level: 6.3
Summary: A vulnerability has been found in Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 (Connectivity Software) and classified as critical. Affected by this vulnerability is an unknown code block. Applying the patch 10.9 RP5/10.10 RP6/10.11 RP4/10.12 RP2 is able to eliminate this problem.
Level: 6.3
libuv up to 10.22.0/12.18.3/14.8.x realpath memory corruption (CVE-2020-8252)
Summary: A vulnerability, which was classified as critical, was found in libuv up to 10.22.0/12.18.3/14.8.x. Affected is the function realpath. Upgrading to version 10.22.1, 12.18.4 or 14.9.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in libuv up to 10.22.0/12.18.3/14.8.x. Affected is the function realpath. Upgrading to version 10.22.1, 12.18.4 or 14.9.0 eliminates this vulnerability.
Level: 5.5
Advantech WebAccess Node up to 9.0.0 privilege escalation (CVE-2020-16202)
Summary: A vulnerability was found in Advantech WebAccess Node up to 9.0.0 (SCADA Software) and classified as critical. Affected by this issue is an unknown function. Upgrading to version 9.0.1 eliminates this vulnerability. The upgrade is hosted for download at support.advantech.com.
Level: 8.0
Summary: A vulnerability was found in Advantech WebAccess Node up to 9.0.0 (SCADA Software) and classified as critical. Affected by this issue is an unknown function. Upgrading to version 9.0.1 eliminates this vulnerability. The upgrade is hosted for download at support.advantech.com.
Level: 8.0
AVEVA Enterprise Data Management Web prior 2019 SP1 sql injection (CVE-2020-13501)
Summary: A vulnerability has been found in AVEVA Enterprise Data Management Web and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 2019 SP1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 7.3
Summary: A vulnerability has been found in AVEVA Enterprise Data Management Web and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 2019 SP1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 7.3
Cisco FirePOWER Management Center Web-based Management Interface HTTP Requests weak authentication (CVE-2019-16028)
Summary: A vulnerability was found in Cisco FirePOWER Management Center (Firewall Software) (affected version not known) and classified as critical. Affected by this issue is some unknown processing of the component Web-based Management Interface. Upgrading eliminates this vulnerability.
Level: 7.3
Summary: A vulnerability was found in Cisco FirePOWER Management Center (Firewall Software) (affected version not known) and classified as critical. Affected by this issue is some unknown processing of the component Web-based Management Interface. Upgrading eliminates this vulnerability.
Level: 7.3
Cisco TelePresence Collaboration Endpoint Video Endpoint API directory traversal (CVE-2020-3143)
Summary: A vulnerability classified as critical has been found in Cisco TelePresence Collaboration Endpoint, TelePresence Codec and RoomOS (Unified Communication Software) (the affected version unknown). This affects an unknown code block of the component Video Endpoint API. Upgrading eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability classified as critical has been found in Cisco TelePresence Collaboration Endpoint, TelePresence Codec and RoomOS (Unified Communication Software) (the affected version unknown). This affects an unknown code block of the component Video Endpoint API. Upgrading eliminates this vulnerability.
Level: 6.3
Cisco Cisco Email Security Appliance Content Filter Email Message privilege escalation (CVE-2020-3133)
Summary: A vulnerability was found in Cisco Cisco Email Security Appliance (Anti-Malware Software) (version unknown). It has been classified as critical. Affected is some unknown functionality of the component Content Filter. Upgrading eliminates this vulnerability.
Level: 7.3
Summary: A vulnerability was found in Cisco Cisco Email Security Appliance (Anti-Malware Software) (version unknown). It has been classified as critical. Affected is some unknown functionality of the component Content Filter. Upgrading eliminates this vulnerability.
Level: 7.3
Cisco Unity Connection Web Management Interface HTTP Request directory traversal (CVE-2020-3130)
Summary: A vulnerability was found in Cisco Unity Connection (Unified Communication Software) (unknown version) and classified as critical. This issue affects an unknown functionality of the component Web Management Interface. Upgrading eliminates this vulnerability.
Level: 5.0
Summary: A vulnerability was found in Cisco Unity Connection (Unified Communication Software) (unknown version) and classified as critical. This issue affects an unknown functionality of the component Web Management Interface. Upgrading eliminates this vulnerability.
Level: 5.0
PingID integration up to 2.4.1 on Windows CefSharp.BrowserSubprocess.exe privilege escalation (CVE-2020-25826)
Summary: A vulnerability, which was classified as critical, has been found in PingID integration up to 2.4.1 on Windows. This issue affects an unknown function of the file CefSharp.BrowserSubprocess.exe. Upgrading to version 2.4.2 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, has been found in PingID integration up to 2.4.1 on Windows. This issue affects an unknown function of the file CefSharp.BrowserSubprocess.exe. Upgrading to version 2.4.2 eliminates this vulnerability.
Level: 5.3