Storable Configs Plugin up to 1.0 on Jenkins Permission privilege escalation (CVE-2020-2277)
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability has been found in Storable Configs Plugin up to 1.0 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown function of the component Permission. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Adobe Media Encoder up to 14.3.2 Out-of-Bounds memory corruption (CVE-2020-9745)
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability has been found in Adobe Media Encoder up to 14.3.2 and classified as critical. Affected by this vulnerability is an unknown part. Upgrading eliminates this vulnerability.
Level: 6.3
Huawei Taurus-AN00B prior 10.1.0.156(C00E155R7P2) Use-After-Free memory corruption (CVE-2020-9084)
Summary: A vulnerability was found in Huawei Taurus-AN00B and classified as critical. Affected by this issue is some unknown processing. Upgrading to version 10.1.0.156(C00E155R7P2) eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability was found in Huawei Taurus-AN00B and classified as critical. Affected by this issue is some unknown processing. Upgrading to version 10.1.0.156(C00E155R7P2) eliminates this vulnerability.
Level: 5.3
Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 weak authentication (CVE-2020-8253)
Summary: A vulnerability has been found in Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 (Connectivity Software) and classified as critical. Affected by this vulnerability is an unknown code block. Applying the patch 10.9 RP5/10.10 RP6/10.11 RP4/10.12 RP2 is able to eliminate this problem.
Level: 6.3
Summary: A vulnerability has been found in Citrix XenMobile Server up to 10.9 RP4/10.10 RP5/10.11 RP3/10.12 RP1 (Connectivity Software) and classified as critical. Affected by this vulnerability is an unknown code block. Applying the patch 10.9 RP5/10.10 RP6/10.11 RP4/10.12 RP2 is able to eliminate this problem.
Level: 6.3
libuv up to 10.22.0/12.18.3/14.8.x realpath memory corruption (CVE-2020-8252)
Summary: A vulnerability, which was classified as critical, was found in libuv up to 10.22.0/12.18.3/14.8.x. Affected is the function realpath. Upgrading to version 10.22.1, 12.18.4 or 14.9.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability, which was classified as critical, was found in libuv up to 10.22.0/12.18.3/14.8.x. Affected is the function realpath. Upgrading to version 10.22.1, 12.18.4 or 14.9.0 eliminates this vulnerability.
Level: 5.5
Advantech WebAccess Node up to 9.0.0 privilege escalation (CVE-2020-16202)
Summary: A vulnerability was found in Advantech WebAccess Node up to 9.0.0 (SCADA Software) and classified as critical. Affected by this issue is an unknown function. Upgrading to version 9.0.1 eliminates this vulnerability. The upgrade is hosted for download at support.advantech.com.
Level: 8.0
Summary: A vulnerability was found in Advantech WebAccess Node up to 9.0.0 (SCADA Software) and classified as critical. Affected by this issue is an unknown function. Upgrading to version 9.0.1 eliminates this vulnerability. The upgrade is hosted for download at support.advantech.com.
Level: 8.0
AVEVA Enterprise Data Management Web prior 2019 SP1 sql injection (CVE-2020-13501)
Summary: A vulnerability has been found in AVEVA Enterprise Data Management Web and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 2019 SP1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 7.3
Summary: A vulnerability has been found in AVEVA Enterprise Data Management Web and classified as critical. Affected by this vulnerability is some unknown processing. Upgrading to version 2019 SP1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 7.3
Cisco FirePOWER Management Center Web-based Management Interface HTTP Requests weak authentication (CVE-2019-16028)
Summary: A vulnerability was found in Cisco FirePOWER Management Center (Firewall Software) (affected version not known) and classified as critical. Affected by this issue is some unknown processing of the component Web-based Management Interface. Upgrading eliminates this vulnerability.
Level: 7.3
Summary: A vulnerability was found in Cisco FirePOWER Management Center (Firewall Software) (affected version not known) and classified as critical. Affected by this issue is some unknown processing of the component Web-based Management Interface. Upgrading eliminates this vulnerability.
Level: 7.3
Cisco TelePresence Collaboration Endpoint Video Endpoint API directory traversal (CVE-2020-3143)
Summary: A vulnerability classified as critical has been found in Cisco TelePresence Collaboration Endpoint, TelePresence Codec and RoomOS (Unified Communication Software) (the affected version unknown). This affects an unknown code block of the component Video Endpoint API. Upgrading eliminates this vulnerability.
Level: 6.3
Summary: A vulnerability classified as critical has been found in Cisco TelePresence Collaboration Endpoint, TelePresence Codec and RoomOS (Unified Communication Software) (the affected version unknown). This affects an unknown code block of the component Video Endpoint API. Upgrading eliminates this vulnerability.
Level: 6.3
Cisco Cisco Email Security Appliance Content Filter Email Message privilege escalation (CVE-2020-3133)
Summary: A vulnerability was found in Cisco Cisco Email Security Appliance (Anti-Malware Software) (version unknown). It has been classified as critical. Affected is some unknown functionality of the component Content Filter. Upgrading eliminates this vulnerability.
Level: 7.3
Summary: A vulnerability was found in Cisco Cisco Email Security Appliance (Anti-Malware Software) (version unknown). It has been classified as critical. Affected is some unknown functionality of the component Content Filter. Upgrading eliminates this vulnerability.
Level: 7.3
Cisco Unity Connection Web Management Interface HTTP Request directory traversal (CVE-2020-3130)
Summary: A vulnerability was found in Cisco Unity Connection (Unified Communication Software) (unknown version) and classified as critical. This issue affects an unknown functionality of the component Web Management Interface. Upgrading eliminates this vulnerability.
Level: 5.0
Summary: A vulnerability was found in Cisco Unity Connection (Unified Communication Software) (unknown version) and classified as critical. This issue affects an unknown functionality of the component Web Management Interface. Upgrading eliminates this vulnerability.
Level: 5.0
PingID integration up to 2.4.1 on Windows CefSharp.BrowserSubprocess.exe privilege escalation (CVE-2020-25826)
Summary: A vulnerability, which was classified as critical, has been found in PingID integration up to 2.4.1 on Windows. This issue affects an unknown function of the file CefSharp.BrowserSubprocess.exe. Upgrading to version 2.4.2 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, has been found in PingID integration up to 2.4.1 on Windows. This issue affects an unknown function of the file CefSharp.BrowserSubprocess.exe. Upgrading to version 2.4.2 eliminates this vulnerability.
Level: 5.3
IBM Security Secret Server 10.9 privilege escalation (CVE-2020-4324)
Summary: A vulnerability was found in IBM Security Secret Server 10.9. It has been classified as critical. This affects an unknown functionality of the component Server. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in IBM Security Secret Server 10.9. It has been classified as critical. This affects an unknown functionality of the component Server. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Trend Micro Security 2019 v15 SSL Certificate Validator Update weak authentication (CVE-2020-24560)
Summary: A vulnerability has been found in Trend Micro Security 2019 v15 and classified as critical. Affected by this vulnerability is an unknown part of the component SSL Certificate Validator. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.6
Summary: A vulnerability has been found in Trend Micro Security 2019 v15 and classified as critical. Affected by this vulnerability is an unknown part of the component SSL Certificate Validator. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.6
Xen up to 4.14.x Timer Migration denial of service (CVE-2020-25604)
Summary: A vulnerability, which was classified as critical, has been found in Xen up to 4.14.x (Virtualization Software). This issue affects an unknown functionality of the component Timer Migration Handler. Upgrading eliminates this vulnerability.
Level: 5.7
Summary: A vulnerability, which was classified as critical, has been found in Xen up to 4.14.x (Virtualization Software). This issue affects an unknown functionality of the component Timer Migration Handler. Upgrading eliminates this vulnerability.
Level: 5.7
Xen up to 4.14.x Event Channel smp_*mb memory corruption (CVE-2020-25603)
Summary: A vulnerability classified as critical was found in Xen up to 4.14.x (Virtualization Software). This vulnerability affects the function smp_*mb of the component Event Channel Handler. Upgrading eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in Xen up to 4.14.x (Virtualization Software). This vulnerability affects the function smp_*mb of the component Event Channel Handler. Upgrading eliminates this vulnerability.
Level: 5.5
AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 SOAP FavoritesService.asmx HTTP Request sql injection (CVE-2020-6153)
Summary: A vulnerability was found in AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 and classified as critical. Affected by this issue is an unknown functionality of the file FavoritesService.asmx of the component SOAP Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability was found in AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 and classified as critical. Affected by this issue is an unknown functionality of the file FavoritesService.asmx of the component SOAP Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Check Point Security Management CA Web Management privilege escalation (CVE-2020-6020)
Summary: A vulnerability has been found in Check Point Security Management (affected version unknown) and classified as critical. Affected by this vulnerability is an unknown function of the component CA Web Management. Upgrading eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability has been found in Check Point Security Management (affected version unknown) and classified as critical. Affected by this vulnerability is an unknown function of the component CA Web Management. Upgrading eliminates this vulnerability.
Level: 4.6
Linux Kernel up to 5.8.1 NFC Socket net/nfc/rawsock.c privilege escalation (CVE-2020-26088)
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.8.1 (Operating System). Affected is some unknown processing of the file net/nfc/rawsock.c of the component NFC Socket Handler. Upgrading to version 5.8.2 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.8.1 (Operating System). Affected is some unknown processing of the file net/nfc/rawsock.c of the component NFC Socket Handler. Upgrading to version 5.8.2 eliminates this vulnerability.
Level: 5.3
Gemtek WRTM-127ACN/WRTM-127x9 Monitor Diagnostic Network Page privilege escalation (CVE-2020-24365)
Summary: A vulnerability, which was classified as critical, has been found in Gemtek WRTM-127ACN and WRTM-127x9 (unknown version). This issue affects an unknown code block of the component Monitor Diagnostic Network Page. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Summary: A vulnerability, which was classified as critical, has been found in Gemtek WRTM-127ACN and WRTM-127x9 (unknown version). This issue affects an unknown code block of the component Monitor Diagnostic Network Page. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Apple macOS up to 10.15.6 Sandbox privilege escalation (CVE-2020-9968)
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been rated as critical. This issue affects an unknown code of the component Sandbox. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been rated as critical. This issue affects an unknown code of the component Sandbox. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5