AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 SOAP FavoritesService.asmx HTTP Request sql injection (CVE-2020-6153)
Summary: A vulnerability was found in AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 and classified as critical. Affected by this issue is an unknown functionality of the file FavoritesService.asmx of the component SOAP Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability was found in AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 and classified as critical. Affected by this issue is an unknown functionality of the file FavoritesService.asmx of the component SOAP Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Check Point Security Management CA Web Management privilege escalation (CVE-2020-6020)
Summary: A vulnerability has been found in Check Point Security Management (affected version unknown) and classified as critical. Affected by this vulnerability is an unknown function of the component CA Web Management. Upgrading eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability has been found in Check Point Security Management (affected version unknown) and classified as critical. Affected by this vulnerability is an unknown function of the component CA Web Management. Upgrading eliminates this vulnerability.
Level: 4.6
Linux Kernel up to 5.8.1 NFC Socket net/nfc/rawsock.c privilege escalation (CVE-2020-26088)
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.8.1 (Operating System). Affected is some unknown processing of the file net/nfc/rawsock.c of the component NFC Socket Handler. Upgrading to version 5.8.2 eliminates this vulnerability.
Level: 5.3
Summary: A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.8.1 (Operating System). Affected is some unknown processing of the file net/nfc/rawsock.c of the component NFC Socket Handler. Upgrading to version 5.8.2 eliminates this vulnerability.
Level: 5.3
Gemtek WRTM-127ACN/WRTM-127x9 Monitor Diagnostic Network Page privilege escalation (CVE-2020-24365)
Summary: A vulnerability, which was classified as critical, has been found in Gemtek WRTM-127ACN and WRTM-127x9 (unknown version). This issue affects an unknown code block of the component Monitor Diagnostic Network Page. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Summary: A vulnerability, which was classified as critical, has been found in Gemtek WRTM-127ACN and WRTM-127x9 (unknown version). This issue affects an unknown code block of the component Monitor Diagnostic Network Page. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 8.0
Apple macOS up to 10.15.6 Sandbox privilege escalation (CVE-2020-9968)
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been rated as critical. This issue affects an unknown code of the component Sandbox. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been rated as critical. This issue affects an unknown code of the component Sandbox. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 5.5
Apple macOS up to 10.15.6 Model IO Out-of-Bounds memory corruption (CVE-2020-9973)
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been declared as critical. This vulnerability affects an unknown part of the component Model IO. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 6.3
Summary: A vulnerability was found in Apple macOS up to 10.15.6. It has been declared as critical. This vulnerability affects an unknown part of the component Model IO. Upgrading to version 10.15.7 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Level: 6.3
IBM InfoSphere Information Server 11.7 Clickjacking privilege escalation (CVE-2020-4727)
Summary: A vulnerability, which was classified as critical, was found in IBM InfoSphere Information Server 11.7 (Reporting Software). Affected is an unknown function. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability, which was classified as critical, was found in IBM InfoSphere Information Server 11.7 (Reporting Software). Affected is an unknown function. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
projectworlds Visitor Management System sql injection (CVE-2020-25760)
Summary: A vulnerability was found in projectworlds Visitor Management System (Project Management Software) (affected version not known) and classified as critical. Affected by this issue is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in projectworlds Visitor Management System (Project Management Software) (affected version not known) and classified as critical. Affected by this issue is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
TigerVNC up to 1.10.x TLS Certificate rfb/CSecurityTLS.cxx weak authentication (CVE-2020-26117)
Summary: A vulnerability was found in TigerVNC up to 1.10.x. It has been rated as critical. This issue affects some unknown processing of the file rfb/CSecurityTLS.cxx of the component TLS Certificate Handler. Upgrading to version 1.11.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability was found in TigerVNC up to 1.10.x. It has been rated as critical. This issue affects some unknown processing of the file rfb/CSecurityTLS.cxx of the component TLS Certificate Handler. Upgrading to version 1.11.0 eliminates this vulnerability.
Level: 5.5
FileImporter Extension up to 1.34.3 on MediaWiki Page Creation privilege escalation (CVE-2020-26121)
Summary: A vulnerability was found in FileImporter Extension up to 1.34.3 on MediaWiki. It has been rated as critical. Affected by this issue is an unknown functionality of the component Page Creation. Upgrading to version 1.34.4 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability was found in FileImporter Extension up to 1.34.3 on MediaWiki. It has been rated as critical. Affected by this issue is an unknown functionality of the component Page Creation. Upgrading to version 1.34.4 eliminates this vulnerability.
Level: 5.5
Trend Micro Security 2020 v16 privilege escalation (CVE-2020-25775)
Summary: A vulnerability classified as critical has been found in Trend Micro Security 2020 v16. Affected is an unknown code. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Trend Micro Security 2020 v16. Affected is an unknown code. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Trend Micro Apex One ServerMigrationTool Configuration File privilege escalation (CVE-2020-25773)
Summary: A vulnerability was found in Trend Micro Apex One (the affected version is unknown). It has been declared as critical. This vulnerability affects some unknown functionality of the component ServerMigrationTool. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 4.8
Summary: A vulnerability was found in Trend Micro Apex One (the affected version is unknown). It has been declared as critical. This vulnerability affects some unknown functionality of the component ServerMigrationTool. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 4.8
IBM Security Secret Server 1.2 privilege escalation (CVE-2020-4607)
Summary: A vulnerability classified as critical was found in IBM Security Secret Server 1.2. Affected by this vulnerability is an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.3
Summary: A vulnerability classified as critical was found in IBM Security Secret Server 1.2. Affected by this vulnerability is an unknown code block. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.3
goxmldsig up to 1.0.x Signature Validation Digital Signature weak authentication (CVE-2020-15216)
Summary: A vulnerability, which was classified as critical, has been found in goxmldsig up to 1.0.x. Affected by this issue is some unknown processing of the component Signature Validation. Upgrading to version 1.1.0 eliminates this vulnerability. Applying the patch f6188febf0c29d7ffe26a0436212b19cb9615e64 is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version.
Level: 5.0
Summary: A vulnerability, which was classified as critical, has been found in goxmldsig up to 1.0.x. Affected by this issue is some unknown processing of the component Signature Validation. Upgrading to version 1.1.0 eliminates this vulnerability. Applying the patch f6188febf0c29d7ffe26a0436212b19cb9615e64 is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version.
Level: 5.0