Browse CVEs

MEDIUM 6.5 CVE-2020-13594 The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the chan… Esp Idf after 4.2 Fix from $1,6002020-08-31 HIGH 7.5 CVE-2020-4559 IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force … Spectrum Protect after 8.1.10.000 Fix from $1,9502020-08-28 HIGH 8.6 CVE-2020-3397 A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remo… Nx Os Mitigation only Fix from $1,9502020-08-27 HIGH 8.6 CVE-2020-3398 A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remo… Nx Os Mitigation only Fix from $1,9502020-08-27 HIGH 7.2 CVE-2020-3454 A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that coul… Nx Os Mitigation only Fix from $1,9502020-08-27 MEDIUM 5.3 CVE-2020-3496 A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attack… Sg200 50 Firmware after 2.5.5.47 Fix from $1,6002020-08-26 HIGH 8.8 CVE-2020-3506 Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenti… 8000p Ip Camera Firmware Mitigation only Fix from $1,9502020-08-26 HIGH 8.8 CVE-2020-3507 Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenti… 8000p Ip Camera Firmware Mitigation only Fix from $1,9502020-08-26 HIGH 8.1 CVE-2020-3519 A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to c… Data Center Network Manager 11.4+ Fix from $1,9502020-08-26 MEDIUM 6.5 CVE-2020-3521 A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct … Data Center Network Manager 11.4+ Fix from $1,6002020-08-26 HIGH 7.3 CVE-2019-14904 A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name… Ansible 2.7.15 / 2.8.7+ Fix from $1,9502020-08-26 MEDIUM 6.5 CVE-2020-17393 This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first… Parallels Desktop 15.1.4+ Fix from $1,6002020-08-25 HIGH 7.5 CVE-2020-24359 HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network inte… Vault Ssh Helper 0.2.0+ Fix from $1,9502020-08-20 HIGH 8.8 CVE-2020-10289 Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whene… Robot Operating System Patch available Fix from $1,9502020-08-20 MEDIUM 5.5 CVE-2020-3434 A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, … Anyconnect Secure Mobility Client after 4.9.00086 Fix from $1,6002020-08-17 MEDIUM 5.5 CVE-2020-3435 A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, … Anyconnect Secure Mobility Client after 4.9.00086 Fix from $1,6002020-08-17 HIGH 8.6 CVE-2020-3363 A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attack… Sg250x 24 Firmware Mitigation only Fix from $1,9502020-08-17 HIGH 8.8 CVE-2020-13941 Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org… Solr 8.6.0+ Fix from $1,9502020-08-17 HIGH 7.5 CVE-2020-15694 In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get().contentLength() does not … Nim after 1.2.6 Fix from $1,9502020-08-14 HIGH 7.5 CVE-2020-8688 Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of service v… Raid Web Console 3 7.012.016.000+ Fix from $1,9502020-08-13 HIGH 7.8 CVE-2020-0555 Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation of privil… Ax201 Firmware Patch available Fix from $1,9502020-08-13 HIGH 8.2 CVE-2020-12299 Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially… S2600stqr Firmware 02.01.0012+ Fix from $1,9502020-08-13 MEDIUM 6.7 CVE-2020-8742 Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local acces… Nuc8i7behga Firmware Patch available Fix from $1,6002020-08-13 MEDIUM 5.5 CVE-2020-8717 Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authentica… Server Board S2600wt Firmware 1.59+ Fix from $1,6002020-08-13 HIGH 8.2 CVE-2020-8721 Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to pote… Server Board S2600wt Firmware 1.59+ Fix from $1,9502020-08-13 CRITICAL 9.8 CVE-2020-17479 jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array. Json Pattern Validator 2.2.2+ Fix from $2,3002020-08-10 HIGH 7.8 CVE-2020-16227 Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specially crafted project file not … Tpeditor after 1.97 Fix from $1,9502020-08-07 HIGH 7.8 CVE-2020-16215 Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied … Webaccess\/hmi Designer after 2.1.9.31 Fix from $1,9502020-08-06 MEDIUM 6.8 CVE-2020-7459 In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missi… FreeBSD Mitigation only Fix from $1,6002020-08-06 MEDIUM 6.5 CVE-2020-15112 In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.… Fedora 3.3.23 / 3.4.10+ Fix from $1,6002020-08-05