Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Medium 6.1
A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Ed…
-
High 7.5
Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to …
-
Medium 5.3
A specially crafted request could be used to confirm the existence of files hosted on object storage services, without …
-
Medium 6.1
A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in Gi…
-
Medium 6.1
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all …
-
High 8.8
Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an atta…
-
High 7.5
Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which…
-
High 7.5
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. Th…
-
High 7.5
Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authenti…
-
High 7.5
Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an at…
-
Medium 5.9
IBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong pas…
-
Medium 5.4
SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due …
-
High 8.6
SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions wh…
-
Medium 6.9
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10…
-
Medium 6.5
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed…
-
High 7.6
SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Ser…
-
High 8.2
SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary authentication, allowing an…
-
Medium 4.3
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access…
-
Medium 6.5
SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not pe…
-
Medium 5.4
Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 8…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750,…
-
Medium 4.4
Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissio…
-
High 7.8
Symbolic Link vulnerability during DAT update
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the targ…
-
Medium 6.3
Using VSE to bypass Windows Credentials on Lock screen
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Scree…
-
High 7.0
VSE Escalation of Privileges through Alert pop-up window
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via runnin…
-
Medium 4.6
DLL search order hijacking in Host IPS
DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised …
-
Medium 5.9
DLL search order hijacking in MA
DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.
-
High 7.5
Privilege escalation in ToPS for Mac
Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files.
-
Unscored —
A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (Al…
-
Unscored —
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before…
-
Unscored —CVE-2020-13996 Public exploit
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
-
Unscored —
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app a…
-
Medium 6.1
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 whic…
-
Medium 6.4
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwa…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStati…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo No…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkS…
-
Medium 6.4
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
-
Medium 6.7
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged fi…
-
Medium 6.7
A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version…