Browse CVEs

HIGH 8.8 CVE-2020-1286EPSS 12% A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this… Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 8.8 CVE-2020-1239EPSS 6% A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption … Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-9855 A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS C… Mac Os X 10.15.5+ Fix from $1,9502020-06-09 MEDIUM 6.5 CVE-2020-9829 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5. Proce… Ipados 6.2.5 / 13.4.5+ Fix from $1,6002020-06-09 HIGH 7.5 CVE-2020-9826 A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A re… Ipados 10.15.5 / 13.5+ Fix from $1,9502020-06-09 HIGH 8.8 CVE-2020-9803 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari… Safari 6.2.5 / 7.19+ Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-9788 A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.5. A file may be incorrectly rendered … Mac Os X 10.15.5+ Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-9793 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS… Ipados 6.2.5 / 10.15.5+ Fix from $1,9502020-06-09 MEDIUM 6.5 CVE-2020-12803 ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, … Fedora 6.4.4+ Fix from $1,6002020-06-08 HIGH 7.8 CVE-2020-13646 In Cheetah free WiFi 5.1, the driver file (liebaonat.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other i… Cheetah Free Wifi No fix yet Fix from $1,9502020-06-05 MEDIUM 6.5 CVE-2020-10068 In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service.… Zephyr 1.14.0 / 2.2.0+ Fix from $1,6002020-06-05 MEDIUM 6.8 CVE-2020-12852 The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the download… Cells No fix yet Fix from $1,6002020-06-04 CRITICAL 9.8 CVE-2020-13832 An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary cod… Android Mitigation only Fix from $2,3002020-06-04 CRITICAL 9.8 CVE-2020-13835 An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a brute-force attack on user cr… Android Mitigation only Fix from $2,3002020-06-04 HIGH 7.7 CVE-2020-3235 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Sw… iOS Patch available Fix from $1,9502020-06-03 HIGH 8.1 CVE-2020-3238 A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker t… Iox 1.9.0+ Fix from $1,9502020-06-03 HIGH 8.1 CVE-2020-3257 Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and C… iOS Patch available Fix from $1,9502020-06-03 HIGH 8.6 CVE-2020-3221 A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could… Ios Xe Patch available Fix from $1,9502020-06-03 HIGH 8.6 CVE-2020-3225 Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could … iOS Patch available Fix from $1,9502020-06-03 HIGH 8.6 CVE-2020-3226 A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remo… iOS Mitigation only Fix from $1,9502020-06-03 HIGH 8.6 CVE-2020-3228 A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an u… iOS Patch available Fix from $1,9502020-06-03 HIGH 7.5 CVE-2020-3230 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthen… iOS Mitigation only Fix from $1,9502020-06-03 MEDIUM 6.7 CVE-2020-3214 A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileg… Ios Xe Mitigation only Fix from $1,6002020-06-03 MEDIUM 6.7 CVE-2020-3215 A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges… Ios Xe No fix yet Fix from $1,6002020-06-03 HIGH 8.8 CVE-2020-3217 A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Softwa… iOS Patch available Fix from $1,9502020-06-03 HIGH 7.2 CVE-2020-3218 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitr… Ios Xe Patch available Fix from $1,9502020-06-03 HIGH 8.8 CVE-2020-3219 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with ad… Ios Xe Patch available Fix from $1,9502020-06-03 MEDIUM 6.7 CVE-2020-3204 A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local at… iOS Patch available Fix from $1,6002020-06-03 HIGH 8.8 CVE-2020-3205 A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Ind… iOS Patch available Fix from $1,9502020-06-03 HIGH 8.8 CVE-2020-3199 Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and C… iOS Mitigation only Fix from $1,9502020-06-03