Browse CVEs

HIGH 7.0 CVE-2020-12850 The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Cells Enterprise OVF (such as v… Cells No fix yet Fix from $1,9502020-06-11 CRITICAL 9.8 CVE-2020-12757 HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the … Vault 1.4.2+ Fix from $2,3002020-06-10 HIGH 7.8 CVE-2019-3585 Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow loca… Virusscan Enterprise Mitigation only Fix from $1,9502020-06-10 MEDIUM 6.8 CVE-2019-3588 Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unau… Virusscan Enterprise Mitigation only Fix from $1,6002020-06-10 HIGH 7.8 CVE-2020-7280 Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to… Virusscan Enterprise Mitigation only Fix from $1,9502020-06-10 HIGH 8.2 CVE-2019-3617 Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect… Total Protection 4.6+ Fix from $1,9502020-06-10 MEDIUM 6.8 CVE-2020-8320 An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. Thinkpad 11e Yoga Gen 6 Firmware 2020-07-10+ Fix from $1,6002020-06-09 HIGH 8.8 CVE-2020-7014 The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation fl… Elasticsearch after 7.6.1 Fix from $1,9502020-06-03 MEDIUM 6.7 CVE-2020-13776 systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of r… Fedora after 245 Fix from $1,6002020-06-03 HIGH 7.2 CVE-2020-13695 In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges to execute grep as root withou… Quickbox after 2.5.5 Fix from $1,9502020-06-01 HIGH 7.8 CVE-2020-10936 Sympa before 6.2.56 allows privilege escalation. Fedora 6.2.56+ Fix from $1,9502020-05-27 HIGH 7.8 CVE-2020-9046 A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level pri… Kantech Entrapass after 8.22 Fix from $1,9502020-05-26 MEDIUM 5.5 CVE-2020-3812 qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and d… Debian Linux Patch available Fix from $1,6002020-05-26 MEDIUM 5.3 CVE-2020-8021 a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/acces… Debian Linux 2.10.5+ Fix from $1,6002020-05-19 HIGH 7.8 CVE-2019-17066 In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because … Workspace Control 10.4.40.0+ Fix from $1,9502020-05-18 MEDIUM 5.3 CVE-2020-12860 COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe … Covidsafe after 1.0.17 Fix from $1,6002020-05-18 HIGH 7.8 CVE-2020-12798 Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file … Universal Forensic Extraction Device Firmware after 7.5.0.845 Fix from $1,9502020-05-15 HIGH 8.4 CVE-2020-7267 Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files th… Virusscan Enterprise Mitigation only Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7285 Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the l… Mvision Endpoint 20.5.0.94+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7286 Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or pr… Endpoint Detection And Response after 3.1.0 Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7287 Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or prog… Endpoint Detection And Response 3.1.0+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7288 Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or progra… Endpoint Detection And Response 3.1.0+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7289 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perfor… Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7290 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform … Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7291 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform fu… Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7264 Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the… Endpoint Security 10.5.5+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7265 Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherw… Endpoint Security 10.6.9+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7266 Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete … Virusscan Enterprise 1.9.2 / 2.0.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-6652 Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system conf… Intelligent Power Manager after 1.67 Fix from $1,9502020-05-07 HIGH 8.8 CVE-2020-12689 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (trust/oauth/application crede… Ubuntu Linux 15.0.1+ Fix from $1,9502020-05-07