ZDI-20-1453 |
ZDI-CAN-11257 |
Qognify |
CVE-2020-27868 |
9.8 |
2020-12-29 |
2021-03-04 |
Qognify Ocularis EventCoordinator ConnectedChannel_GotMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1452 |
ZDI-CAN-11486 |
Microsoft |
|
6.6 |
2020-12-21 |
2021-02-03 |
(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1451 |
ZDI-CAN-11355 |
NETGEAR |
CVE-2020-27866 |
8.8 |
2020-12-18 |
|
NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability |
ZDI-20-1450 |
ZDI-CAN-11695 |
VMware |
CVE-2020-3999 |
6.5 |
2020-12-18 |
|
VMware Workstation SetGuestInfo Null Pointer Dereference Denial-of-Service Vulnerability |
ZDI-20-1449 |
ZDI-CAN-11847 |
Hewlett Packard Enterprise |
CVE-2020-7200 |
9.8 |
2020-12-18 |
|
Hewlett Packard Enterprise Systems Insight Manager AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1448 |
ZDI-CAN-12385 |
Western Digital |
CVE-2020-28970 |
0.0 |
2020-12-16 |
|
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability |
ZDI-20-1447 |
ZDI-CAN-12327 |
Western Digital |
CVE-2020-28971 |
5.4 |
2020-12-15 |
|
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability |
ZDI-20-1446 |
ZDI-CAN-12465 |
Western Digital |
CVE-2020-29563 |
9.8 |
2020-12-15 |
|
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability |
ZDI-20-1445 |
ZDI-CAN-12214 |
Western Digital |
CVE-2020-28940 |
5.4 |
2020-12-15 |
|
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability |
ZDI-20-1444 |
ZDI-CAN-11083 |
Eaton |
|
7.8 |
2020-12-15 |
|
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-1443 |
ZDI-CAN-11082 |
Eaton |
|
7.8 |
2020-12-15 |
|
(0Day) Eaton EASYsoft E70 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1442 |
ZDI-CAN-11080 |
Eaton |
|
7.8 |
2020-12-15 |
|
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-1441 |
ZDI-CAN-11078 |
Eaton |
|
7.8 |
2020-12-15 |
|
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-1440 |
ZDI-CAN-10905 |
Linux |
|
8.8 |
2020-12-15 |
|
(0Day) Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability |
ZDI-20-1439 |
ZDI-CAN-11115 |
LibTIFF |
|
3.3 |
2020-12-15 |
|
(0Day) LibTIFF tiff2pdf Converter Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1438 |
ZDI-CAN-11359 |
D-Link |
|
8.8 |
2020-12-15 |
|
(0Day) D-Link DCS-960L HTTP Authorization Header Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1437 |
ZDI-CAN-11352 |
D-Link |
|
8.8 |
2020-12-15 |
2021-09-27 |
(0Day) D-Link DCS-960L HNAP LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
ZDI-20-1436 |
ZDI-CAN-11366 |
D-Link |
|
8.8 |
2020-12-15 |
|
(0Day) D-Link DCS-960L HNAP Login Cookie Format String Remote Code Execution Vulnerability |
ZDI-20-1435 |
ZDI-CAN-11360 |
D-Link |
|
8.8 |
2020-12-15 |
2021-09-27 |
(0Day) D-Link DCS-960L HNAP Cookie Format String Remote Code Execution Vulnerability |
ZDI-20-1434 |
ZDI-CAN-11350 |
Microsoft |
CVE-2021-1648 |
2.5 |
2020-12-15 |
|
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Information Disclosure Vulnerability |
ZDI-20-1433 |
ZDI-CAN-11349 |
Microsoft |
CVE-2021-1648 |
2.5 |
2021-01-08 |
|
(0Day) Microsoft Windows splwow64 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1432 |
ZDI-CAN-11351 |
Microsoft |
CVE-2021-1648 |
7.0 |
2020-12-15 |
|
(0Day) Microsoft Windows splwow64 Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1431 |
ZDI-CAN-11632 |
FreeBSD |
CVE-2020-7468 |
8.8 |
2020-12-15 |
|
FreeBSD FTPD Improper Handling of Exceptional Conditions Privilege Escalation Vulnerability |
ZDI-20-1430 |
ZDI-CAN-11076 |
NETGEAR |
CVE-2020-27861 |
8.8 |
2020-12-15 |
|
NETGEAR Orbi UA_Parser Host Name Command Injection Remote Code Execution Vulnerability |
ZDI-20-1429 |
ZDI-CAN-10894 |
D-Link |
CVE-2020-27865 |
8.8 |
2020-12-15 |
|
D-Link DAP-1860 uhttpd Authentication Bypass Remote Code Execution Vulnerability |
ZDI-20-1428 |
ZDI-CAN-10880 |
D-Link |
CVE-2020-27864 |
8.8 |
2020-12-15 |
|
D-Link DAP-1860 HNAP Authorization Command Injection Remote Code Execution Vulnerability |
ZDI-20-1427 |
ZDI-CAN-10912 |
D-Link |
CVE-2020-27863 |
6.5 |
2020-12-15 |
2021-09-27 |
D-Link Multiple Routers dhttpd Authentication Bypass Vulnerability |
ZDI-20-1426 |
ZDI-CAN-10911 |
D-Link |
CVE-2020-27862 |
8.8 |
2020-12-15 |
2021-09-27 |
D-Link Multiple Routers dhttpd Command Injection Remote Code Execution Vulnerability |
ZDI-20-1425 |
ZDI-CAN-11752 |
Microsoft |
CVE-2020-17128 |
7.0 |
2020-12-11 |
|
Microsoft Excel XLS File Parsing Integer Signedness Remote Code Execution Vulnerability |
ZDI-20-1424 |
ZDI-CAN-11888 |
Microsoft |
CVE-2020-17125 |
7.8 |
2020-12-11 |
|
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1423 |
ZDI-CAN-11653 |
NETGEAR |
CVE-2020-27867 |
6.8 |
2020-12-21 |
2020-12-21 |
NETGEAR Multiple Routers mini_httpd Command Injection Remote Code Execution Vulnerability |
ZDI-20-1422 |
ZDI-CAN-11887 |
Microsoft |
CVE-2020-17119 |
2.5 |
2020-12-11 |
|
Microsoft Outlook MSG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1421 |
ZDI-CAN-11839 |
X.Org |
CVE-2020-25712 |
7.8 |
2020-12-09 |
|
X.Org Server XkbSetDeviceInfo Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-1420 |
ZDI-CAN-11572 |
X.Org |
CVE-2020-14360 |
7.8 |
2020-12-09 |
|
X.Org Server XkbSetMap Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-1419 |
ZDI-CAN-11574 |
X.Org |
CVE-2020-14362 |
7.8 |
2020-12-09 |
|
X.Org Server XRecordRegisterClients Integer Underflow Privilege Escalation Vulnerability |
ZDI-20-1418 |
ZDI-CAN-11573 |
X.Org |
CVE-2020-14361 |
7.8 |
2020-12-09 |
|
X.Org Server XkbSelectEvents Integer Underflow Privilege Escalation Vulnerability |
ZDI-20-1417 |
ZDI-CAN-11429 |
X.Org |
CVE-2020-14346 |
7.8 |
2020-12-09 |
|
X.Org Server XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability |
ZDI-20-1416 |
ZDI-CAN-11428 |
X.Org |
CVE-2020-14345 |
7.8 |
2020-12-09 |
|
X.Org Server XkbSetNames Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-1415 |
ZDI-CAN-11727 |
Foxit |
CVE-2020-27860 |
7.8 |
2020-12-09 |
|
Foxit Reader XFA Template Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1414 |
ZDI-CAN-11894 |
Microsoft |
CVE-2020-17124 |
7.8 |
2020-12-09 |
|
Microsoft PowerPoint PPTX File Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1413 |
ZDI-CAN-11906 |
Microsoft |
CVE-2020-17131 |
8.8 |
2020-12-09 |
|
Microsoft Chakra LinearScan Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1412 |
ZDI-CAN-11873 |
Microsoft |
CVE-2020-17121 |
8.8 |
2020-12-09 |
|
Microsoft SharePoint Site Import Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1411 |
ZDI-CAN-11588 |
Apple |
CVE-2020-9956 |
4.3 |
2020-12-09 |
|
Apple macOS libFontParser TTF Font Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1410 |
ZDI-CAN-11307 |
Apple |
CVE-2020-9955 |
4.3 |
2020-12-09 |
|
Apple macOS KTX Image DecodeRow Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1409 |
ZDI-CAN-11122 |
Apple |
CVE-2020-10015 |
7.8 |
2020-12-09 |
|
Apple macOS process_token_BlitLibSetup3D Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-1408 |
ZDI-CAN-11123 |
Apple |
CVE-2020-10015 |
7.8 |
2020-12-09 |
|
Apple macOS process_token_BlitLibSetup2D Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-1407 |
ZDI-CAN-11124 |
Apple |
CVE-2020-27907 |
7.8 |
2020-12-09 |
|
Apple macOS process_token_GenerateMipmaps Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1406 |
ZDI-CAN-11828 |
Apple |
CVE-2020-9999 |
7.8 |
2020-12-08 |
|
Apple macOS CoreText MorxLigatureSubtableBuilder TTF Parsing Out-of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1405 |
ZDI-CAN-11801 |
Apple |
CVE-2020-27931 |
3.3 |
2020-12-08 |
|
Apple macOS libFontParser TwOFFStream TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1404 |
ZDI-CAN-11598 |
Apple |
CVE-2020-27952 |
7.8 |
2020-12-08 |
|
Apple macOS libFontParser TTF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1403 |
ZDI-CAN-11209 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
|
Apple macOS Kernel Command 0x10007 Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1402 |
ZDI-CAN-11208 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
|
Apple macOS Kernel Command 0x10006 Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1401 |
ZDI-CAN-11207 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
|
Apple macOS Kernel Command 0x10005 Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1400 |
ZDI-CAN-10758 |
Realtek |
|
8.0 |
2020-12-07 |
|
(0Day) Realtek RTL8811AU Wi-Fi Driver rtwlane Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1399 |
ZDI-CAN-10715 |
Realtek |
|
8.0 |
2020-12-07 |
|
(0Day) Realtek RTL8811AU Wi-Fi Driver rtwlanu Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1398 |
ZDI-CAN-11267 |
Microsoft |
CVE-2020-0971 |
6.5 |
2020-12-04 |
|
Microsoft SharePoint DataFormWebPart Server-Side Include Information Disclosure Vulnerability |
ZDI-20-1397 |
ZDI-CAN-11103 |
Arcserve |
CVE-2020-27858 |
7.5 |
2020-12-04 |
|
Arcserve D2D getNews XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-1396 |
ZDI-CAN-11507 |
Apple |
CVE-2020-10017 |
7.8 |
2020-12-04 |
|
Apple macOS AudioCodecs AAC Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1395 |
ZDI-CAN-11183 |
Apple |
CVE-2020-10007 |
5.5 |
2020-12-04 |
2024-07-08 |
Apple macOS powerd Uninitialized Memory Information Disclosure Vulnerability |
ZDI-20-1394 |
ZDI-CAN-11498 |
Apple |
CVE-2020-9950 |
4.3 |
2020-12-03 |
|
Apple Safari TextNode Use-After-Free Information Disclosure Vulnerability |
ZDI-20-1393 |
ZDI-CAN-11457 |
Apple |
CVE-2020-9996 |
7.8 |
2020-12-03 |
|
Apple macOS libnetworkextension ne_filter_protocol_remove_input_handler Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1392 |
ZDI-CAN-11235 |
Apple |
CVE-2020-9954 |
7.8 |
2020-12-03 |
|
Apple macOS AudioCodecs Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1391 |
ZDI-CAN-11189 |
Apple |
CVE-2020-9889 |
7.8 |
2020-12-03 |
|
Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability |
ZDI-20-1390 |
ZDI-CAN-11125 |
Apple |
CVE-2020-9947 |
8.8 |
2020-12-03 |
|
Apple Safari RenderObject Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1389 |
ZDI-CAN-11210 |
Apple |
CVE-2020-9883 |
3.3 |
2020-12-03 |
|
Apple macOS CoreGraphics JBIG2Stream Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1388 |
ZDI-CAN-11575 |
McAfee |
CVE-2020-7335 |
7.0 |
2020-12-01 |
|
McAfee Total Protection Junction Privilege Escalation Vulnerability |
ZDI-20-1387 |
ZDI-CAN-11583 |
Trend Micro |
CVE-2020-28583 |
5.3 |
2020-11-27 |
|
Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1386 |
ZDI-CAN-11582 |
Trend Micro |
CVE-2020-28582 |
5.3 |
2020-11-27 |
|
Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1385 |
ZDI-CAN-12409 |
VMware |
CVE-2020-3992 |
7.8 |
2020-11-25 |
|
VMware ESXi SLP Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-1384 |
ZDI-CAN-11353 |
Fuji Electric |
CVE-2020-25171 |
7.8 |
2020-11-25 |
|
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1383 |
ZDI-CAN-11173 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
|
SaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability |
ZDI-20-1382 |
ZDI-CAN-11172 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
|
SaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability |
ZDI-20-1381 |
ZDI-CAN-11169 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
|
SaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability |
ZDI-20-1380 |
ZDI-CAN-11167 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
|
SaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability |
ZDI-20-1379 |
ZDI-CAN-11143 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
|
SaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability |
ZDI-20-1378 |
ZDI-CAN-11064 |
Trend Micro |
CVE-2020-28575 |
8.2 |
2020-11-24 |
|
Trend Micro ServerProtect ioctlMod Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-1377 |
ZDI-CAN-12190 |
VMware |
CVE-2020-3992 |
8.8 |
2020-11-23 |
|
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1376 |
ZDI-CAN-11571 |
Trend Micro |
CVE-2020-28577 |
5.3 |
2020-11-22 |
|
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1375 |
ZDI-CAN-11237 |
Trend Micro |
CVE-2020-28576 |
5.3 |
2020-11-22 |
|
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1374 |
ZDI-CAN-11236 |
Trend Micro |
CVE-2020-28573 |
5.3 |
2020-11-22 |
|
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1373 |
ZDI-CAN-12020 |
Microsoft |
CVE-2020-1319 |
8.8 |
2020-11-22 |
|
Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-1372 |
ZDI-CAN-11510 |
Linux |
CVE-2020-14351 |
7.8 |
2020-11-22 |
|
Linux Kernel Performance Counters Race Condition Privilege Escalation Vulnerability |
ZDI-20-1371 |
ZDI-CAN-11867 |
Microsoft |
CVE-2020-17057 |
8.8 |
2020-11-11 |
|
Microsoft Windows DirectComposition Uninitialized Pointer Privilege Escalation Vulnerability |
ZDI-20-1370 |
ZDI-CAN-11871 |
Microsoft |
CVE-2020-17048 |
7.5 |
2020-11-11 |
|
Microsoft Chakra Array Iterator Type Confusion Remote Code Execution Vulnerability |
ZDI-20-1369 |
ZDI-CAN-11875 |
Microsoft |
CVE-2020-17053 |
8.8 |
2020-11-11 |
|
Microsoft Internet Explorer array Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1368 |
ZDI-CAN-11874 |
Microsoft |
CVE-2020-17053 |
8.8 |
2020-11-11 |
|
Microsoft Internet Explorer array Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1367 |
ZDI-CAN-11518 |
Microsoft |
CVE-2020-17019 |
7.8 |
2020-11-11 |
|
Microsoft Excel XLS File Parsing Double Free Remote Code Execution Vulnerability |
ZDI-20-1366 |
ZDI-CAN-11796 |
Microsoft |
CVE-2020-17014 |
6.1 |
2020-11-11 |
2020-12-01 |
Microsoft Windows Print Spooler Directory Junction Denial-of-Service Vulnerability |
ZDI-20-1365 |
ZDI-CAN-11361 |
Microsoft |
CVE-2020-17012 |
7.8 |
2020-11-11 |
|
Microsoft Windows bindflt Driver Missing Authentication Privilege Escalation Vulnerability |
ZDI-20-1364 |
ZDI-CAN-11866 |
SAP |
CVE-2020-26817 |
7.8 |
2020-11-11 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1363 |
ZDI-CAN-11175 |
Cisco |
CVE-2020-3604 |
7.8 |
2020-11-10 |
|
Cisco WebEx Network Recording Player ARF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1362 |
ZDI-CAN-11176 |
Cisco |
CVE-2020-3573 |
7.8 |
2020-11-10 |
|
Cisco WebEx Network Recording Player ARF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-1361 |
ZDI-CAN-11133 |
Cisco |
CVE-2020-3603 |
7.8 |
2020-11-10 |
|
Cisco WebEx Network Recording Player ARF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1360 |
ZDI-CAN-11187 |
WECON |
CVE-2020-25181 |
7.8 |
2020-11-10 |
|
WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1359 |
ZDI-CAN-11186 |
WECON |
CVE-2020-25181 |
7.8 |
2020-11-10 |
|
WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1358 |
ZDI-CAN-11185 |
WECON |
CVE-2020-25177 |
7.8 |
2020-11-10 |
|
WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1357 |
ZDI-CAN-12015 |
Adobe |
CVE-2020-24438 |
3.3 |
2020-11-10 |
|
Adobe Acrobat Reader DC AVDocumentLocal Use-After-Free Information Disclosure Vulnerability |
ZDI-20-1356 |
ZDI-CAN-11958 |
Adobe |
CVE-2020-24434 |
3.3 |
2020-11-10 |
|
Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1355 |
ZDI-CAN-11957 |
Adobe |
CVE-2020-24436 |
7.8 |
2020-11-10 |
|
Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1354 |
ZDI-CAN-11540 |
Adobe |
CVE-2020-24426 |
3.3 |
2020-11-10 |
|
Adobe Acrobat Reader DC ID Parameter Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1353 |
ZDI-CAN-11100 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
|
WECON LeviStudioU HSC File Parsing CharSize Attribute Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1352 |
ZDI-CAN-11098 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
|
WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1351 |
ZDI-CAN-11097 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
|
WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1350 |
ZDI-CAN-11488 |
Foxit |
CVE-2020-27857 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1349 |
ZDI-CAN-11434 |
Foxit |
CVE-2020-27856 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1348 |
ZDI-CAN-11433 |
Foxit |
CVE-2020-27855 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo SR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1347 |
ZDI-CAN-11432 |
Foxit |
CVE-2020-17436 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1346 |
ZDI-CAN-11358 |
Foxit |
CVE-2020-17435 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1345 |
ZDI-CAN-11357 |
Foxit |
CVE-2020-17434 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo ARW File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1344 |
ZDI-CAN-11356 |
Foxit |
CVE-2020-17433 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1343 |
ZDI-CAN-11335 |
Foxit |
CVE-2020-17432 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1342 |
ZDI-CAN-11333 |
Foxit |
CVE-2020-17431 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1341 |
ZDI-CAN-11332 |
Foxit |
CVE-2020-17430 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1340 |
ZDI-CAN-11337 |
Foxit |
CVE-2020-17429 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1339 |
ZDI-CAN-11336 |
Foxit |
CVE-2020-17428 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1338 |
ZDI-CAN-11334 |
Foxit |
CVE-2020-17427 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1337 |
ZDI-CAN-11230 |
Foxit |
CVE-2020-17426 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo CR2 File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1336 |
ZDI-CAN-11259 |
Foxit |
CVE-2020-17425 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1335 |
ZDI-CAN-11247 |
Foxit |
CVE-2020-17424 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo EZI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1334 |
ZDI-CAN-11196 |
Foxit |
CVE-2020-17423 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo ARW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1333 |
ZDI-CAN-11195 |
Foxit |
CVE-2020-17422 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1332 |
ZDI-CAN-11194 |
Foxit |
CVE-2020-17421 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1331 |
ZDI-CAN-11193 |
Foxit |
CVE-2020-17420 |
3.3 |
2020-10-28 |
|
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1330 |
ZDI-CAN-11192 |
Foxit |
CVE-2020-17419 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1329 |
ZDI-CAN-11197 |
Foxit |
CVE-2020-17418 |
7.8 |
2020-10-28 |
|
Foxit Studio Photo EZIX channel id Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1328 |
ZDI-CAN-11198 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SAMDownloadServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability |
ZDI-20-1327 |
ZDI-CAN-11203 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager RegistrationServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability |
ZDI-20-1326 |
ZDI-CAN-11204 |
Micro Focus |
CVE-2020-11858 |
7.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-1325 |
ZDI-CAN-11417 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager GenericAdapterService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1324 |
ZDI-CAN-11416 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager LicensingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1323 |
ZDI-CAN-11415 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager AutomationMappingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1322 |
ZDI-CAN-11414 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager ResourceManagementService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1321 |
ZDI-CAN-11413 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager MultiTenancyService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1320 |
ZDI-CAN-11412 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CITService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1319 |
ZDI-CAN-11411 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager LDAPService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1318 |
ZDI-CAN-11410 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SnapshotService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1317 |
ZDI-CAN-11409 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager ClassModelService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1316 |
ZDI-CAN-11408 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager PermissionsService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1315 |
ZDI-CAN-11407 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CommonService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1314 |
ZDI-CAN-11406 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager ImpactService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1313 |
ZDI-CAN-11405 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SchedulerService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1312 |
ZDI-CAN-11404 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager LocationService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1311 |
ZDI-CAN-11403 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager BundleService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1310 |
ZDI-CAN-11402 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1309 |
ZDI-CAN-11401 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CIService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1308 |
ZDI-CAN-11400 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager DataAcquisitionService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1307 |
ZDI-CAN-11399 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SoftwareLibraryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1306 |
ZDI-CAN-11398 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager ServiceDiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1305 |
ZDI-CAN-11397 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager DiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1304 |
ZDI-CAN-11396 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager MailService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1303 |
ZDI-CAN-11395 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager RelatedCIsService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1302 |
ZDI-CAN-11394 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager FolderService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1301 |
ZDI-CAN-11393 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager PatternService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1300 |
ZDI-CAN-11392 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CMSImagesService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1299 |
ZDI-CAN-11391 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager ReportService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1298 |
ZDI-CAN-11390 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager TopologyService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1297 |
ZDI-CAN-11389 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager WatchServerAPI Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1296 |
ZDI-CAN-11388 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager BusinessModelFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1295 |
ZDI-CAN-11387 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager FoldersFacade Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1294 |
ZDI-CAN-11386 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SchedulerFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1293 |
ZDI-CAN-11385 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1292 |
ZDI-CAN-11384 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CorrelationRunnerFacade Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1291 |
ZDI-CAN-11383 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CorrelationFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1290 |
ZDI-CAN-11382 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CategoryFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1289 |
ZDI-CAN-11381 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager CmdbOperationExecuterService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1288 |
ZDI-CAN-11200 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager SecurityService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1287 |
ZDI-CAN-11201 |
Micro Focus |
CVE-2020-11854 |
9.8 |
2020-10-28 |
|
Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability |
ZDI-20-1286 |
ZDI-CAN-11047 |
Trend Micro |
CVE-2020-27015 |
6.0 |
2020-10-26 |
|
Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability |
ZDI-20-1285 |
ZDI-CAN-11045 |
Trend Micro |
CVE-2020-27014 |
8.2 |
2020-10-26 |
|
Trend Micro Antivirus for Mac Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1284 |
ZDI-CAN-10607 |
WECON |
CVE-2020-25186 |
5.5 |
2020-10-22 |
|
WECON LeviStudioU XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-1283 |
ZDI-CAN-11687 |
Oracle |
CVE-2020-14876 |
7.5 |
2020-10-22 |
|
Oracle E-Business Suite ozfVendorLov SQL Injection Information Disclosure Vulnerability |
ZDI-20-1282 |
ZDI-CAN-11829 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1281 |
ZDI-CAN-11679 |
Oracle |
CVE-2020-14885 |
5.3 |
2020-10-22 |
|
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1280 |
ZDI-CAN-11677 |
Oracle |
CVE-2020-14886 |
5.3 |
2020-10-22 |
|
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1279 |
ZDI-CAN-11676 |
Oracle |
CVE-2020-14884 |
5.3 |
2020-10-22 |
|
Oracle VirtualBox Shader Bytecode Type Confusion Information Disclosure Vulnerability |
ZDI-20-1278 |
ZDI-CAN-11678 |
Oracle |
CVE-2020-14881 |
5.3 |
2020-10-22 |
|
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1277 |
ZDI-CAN-11591 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1276 |
ZDI-CAN-11453 |
Oracle |
CVE-2020-14841 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server IIOP Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1275 |
ZDI-CAN-11305 |
Oracle |
CVE-2020-14859 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1274 |
ZDI-CAN-10818 |
Oracle |
CVE-2020-14841 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server IIOP Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1273 |
ZDI-CAN-10968 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1272 |
ZDI-CAN-11477 |
Adobe |
CVE-2020-24410 |
7.8 |
2020-10-22 |
|
Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1271 |
ZDI-CAN-11474 |
Adobe |
CVE-2020-24409 |
7.8 |
2020-10-22 |
|
Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1270 |
ZDI-CAN-11346 |
Adobe |
CVE-2020-24411 |
7.8 |
2020-10-22 |
|
Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1269 |
ZDI-CAN-11563 |
VMware |
CVE-2020-3992 |
9.8 |
2020-10-20 |
|
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1268 |
ZDI-CAN-11228 |
VMware |
CVE-2020-3982 |
8.2 |
2020-10-20 |
2021-03-02 |
VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1267 |
ZDI-CAN-11227 |
VMware |
CVE-2020-3981 |
6.0 |
2020-10-20 |
2021-03-02 |
VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
ZDI-20-1266 |
ZDI-CAN-11705 |
SAP |
CVE-2020-6374 |
7.8 |
2020-10-19 |
|
SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1265 |
ZDI-CAN-11243 |
SAP |
CVE-2020-6315 |
5.5 |
2020-10-19 |
|
SAP 3D Visual Enterprise Viewer SVG File XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-1264 |
ZDI-CAN-11467 |
SAP |
CVE-2020-6372 |
7.8 |
2020-10-19 |
|
SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1263 |
ZDI-CAN-11462 |
SAP |
CVE-2020-6373 |
7.8 |
2020-10-19 |
|
SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1262 |
ZDI-CAN-11373 |
Advantech |
CVE-2020-25157 |
7.5 |
2020-10-19 |
|
Advantech R-SeeNet device_position device_id SQL Injection Information Disclosure Vulnerability |
ZDI-20-1261 |
ZDI-CAN-11262 |
Advantech |
CVE-2020-25161 |
8.8 |
2020-10-19 |
|
Advantech WebAccess/SCADA WADashboard External Control of File Path Remote Code Execution Vulnerability |
ZDI-20-1260 |
ZDI-CAN-10924 |
Apple |
CVE-2020-9990 |
7.8 |
2020-10-19 |
|
Apple macOS process_token_SetFence Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1259 |
ZDI-CAN-10823 |
Apple |
CVE-2020-9990 |
7.8 |
2020-10-19 |
|
Apple macOS process_token_SetFence Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1258 |
ZDI-CAN-11981 |
Microsoft |
CVE-2020-16968 |
8.8 |
2020-10-19 |
|
Microsoft Windows Camera Codec Pack Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1257 |
ZDI-CAN-11980 |
Microsoft |
CVE-2020-16915 |
8.8 |
2020-10-19 |
|
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1256 |
ZDI-CAN-11602 |
Microsoft |
CVE-2020-16930 |
7.8 |
2020-10-19 |
|
Microsoft Excel XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1255 |
ZDI-CAN-11613 |
Microsoft |
CVE-2020-16931 |
7.8 |
2020-10-19 |
|
Microsoft Excel XLS File Parsing Uninitialized Variable Remote Code Execution Vulnerability |
ZDI-20-1254 |
ZDI-CAN-11622 |
Microsoft |
CVE-2020-16939 |
7.3 |
2020-10-19 |
|
Microsoft Windows Group Policy Client Service Link Resolution Privilege Escalation Vulnerability |
ZDI-20-1253 |
ZDI-CAN-11529 |
Microsoft |
CVE-2020-16932 |
7.8 |
2020-10-19 |
|
Microsoft Excel XLS File Parsing Uninitialized Variable Remote Code Execution Vulnerability |
ZDI-20-1252 |
ZDI-CAN-11524 |
Microsoft |
CVE-2020-16930 |
7.8 |
2020-10-19 |
|
Microsoft Excel XLS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-1251 |
ZDI-CAN-11516 |
Microsoft |
CVE-2020-16929 |
7.8 |
2020-10-19 |
|
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1250 |
ZDI-CAN-11250 |
Microsoft |
CVE-2020-16947 |
3.7 |
2020-10-19 |
|
Microsoft Outlook HTML Email Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1249 |
ZDI-CAN-11249 |
Microsoft |
CVE-2020-16947 |
8.1 |
2020-10-19 |
|
Microsoft Outlook HTML Email Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1248 |
ZDI-CAN-11129 |
Microsoft |
CVE-2020-16940 |
5.5 |
2020-10-19 |
|
Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability |
ZDI-20-1247 |
ZDI-CAN-11174 |
Microsoft |
CVE-2020-1167 |
7.8 |
2020-10-19 |
|
Microsoft 3D Builder GLB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1246 |
ZDI-CAN-11032 |
Microsoft |
CVE-2020-17003 |
5.3 |
2020-10-14 |
|
Microsoft 3D Viewer FBX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1245 |
ZDI-CAN-11241 |
Microsoft |
CVE-2020-16967 |
7.8 |
2020-10-14 |
|
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1244 |
ZDI-CAN-11029 |
LAquis |
CVE-2020-25188 |
7.8 |
2020-10-14 |
|
LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1243 |
ZDI-CAN-10945 |
Trend Micro |
CVE-2020-27013 |
4.4 |
2020-10-14 |
|
Trend Micro Antivirus for Mac Improper Access Control Information Disclosure Vulnerability |
ZDI-20-1242 |
ZDI-CAN-11046 |
Trend Micro |
CVE-2020-25777 |
5.4 |
2020-10-14 |
|
Trend Micro Antivirus for Mac Protection Bypass Vulnerability |
ZDI-20-1241 |
ZDI-CAN-11048 |
Trend Micro |
CVE-2020-25778 |
6.0 |
2020-10-14 |
|
Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability |
ZDI-20-1240 |
ZDI-CAN-10181 |
Realtek |
|
7.5 |
2020-10-08 |
2021-06-29 |
(0Day) Realtek rtl81xx SDK Wi-Fi Driver rtwlane Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1239 |
ZDI-CAN-10180 |
Realtek |
|
7.1 |
2020-10-08 |
2021-06-29 |
(0Day) Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1238 |
ZDI-CAN-11184 |
Apple |
CVE-2020-9883 |
7.8 |
2020-10-08 |
|
Apple macOS CoreGraphics JBIG2Bitmap Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1237 |
ZDI-CAN-10580 |
IBM |
CVE-2020-4799 |
7.8 |
2020-10-08 |
|
IBM Informix spatial Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1236 |
ZDI-CAN-10941 |
Trend Micro |
CVE-2020-25776 |
7.8 |
2020-10-01 |
|
Trend Micro Antivirus for Mac Symbolic Link Privilege Escalation Vulnerability |
ZDI-20-1235 |
ZDI-CAN-11226 |
Foxit |
CVE-2020-17413 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1234 |
ZDI-CAN-11657 |
Foxit |
CVE-2020-17417 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1233 |
ZDI-CAN-11497 |
Foxit |
CVE-2020-17416 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1232 |
ZDI-CAN-11308 |
Foxit |
CVE-2020-17415 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-1231 |
ZDI-CAN-11229 |
Foxit |
CVE-2020-17414 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-1230 |
ZDI-CAN-11224 |
Foxit |
CVE-2020-17412 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1229 |
ZDI-CAN-11190 |
Foxit |
CVE-2020-17411 |
3.3 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1228 |
ZDI-CAN-11135 |
Foxit |
CVE-2020-17410 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF GIF File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1227 |
ZDI-CAN-10819 |
Trend Micro |
CVE-2020-25775 |
5.3 |
2020-09-28 |
|
Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability |
ZDI-20-1226 |
ZDI-CAN-10794 |
Trend Micro |
CVE-2020-24562 |
7.8 |
2020-09-25 |
|
Trend Micro OfficeScan Hard Link Privilege Escalation Vulnerability |
ZDI-20-1225 |
ZDI-CAN-11108 |
Trend Micro |
CVE-2020-25774 |
3.3 |
2020-09-25 |
|
Trend Micro OfficeScan ServerMigrationTool ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1224 |
ZDI-CAN-10973 |
Trend Micro |
CVE-2020-25773 |
7.8 |
2020-09-25 |
|
Trend Micro OfficeScan ServerMigrationTool DAT File Parsing Double Free Remote Code Execution Vulnerability |
ZDI-20-1223 |
ZDI-CAN-10844 |
Trend Micro |
CVE-2020-25771 |
5.5 |
2020-09-25 |
|
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1222 |
ZDI-CAN-10839 |
Trend Micro |
CVE-2020-25772 |
5.5 |
2020-09-25 |
|
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1221 |
ZDI-CAN-10848 |
Trend Micro |
CVE-2020-25770 |
5.5 |
2020-09-25 |
|
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1220 |
ZDI-CAN-10847 |
Trend Micro |
CVE-2020-24565 |
5.5 |
2020-09-25 |
|
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1219 |
ZDI-CAN-10826 |
Trend Micro |
CVE-2020-24564 |
5.5 |
2020-09-25 |
|
Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1218 |
ZDI-CAN-10515 |
Trend Micro |
CVE-2020-24563 |
7.8 |
2020-09-25 |
|
Trend Micro Apex One Authentication Bypass Vulnerability |
ZDI-20-1217 |
ZDI-CAN-11073 |
Micro Focus |
CVE-2020-11855 |
8.4 |
2020-09-23 |
|
Micro Focus Operations Bridge Reporter HPE-OBR Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-1216 |
ZDI-CAN-11071 |
Micro Focus |
CVE-2020-11856 |
9.8 |
2020-09-23 |
|
Micro Focus Operations Bridge Reporter JMX Missing Authentication Remote Code Execution Vulnerability |
ZDI-20-1215 |
ZDI-CAN-11075 |
Micro Focus |
CVE-2020-11857 |
7.3 |
2020-09-23 |
|
Micro Focus Operations Bridge Reporter shrboadmin Use of Hard-coded Credentials Remote Code Execution Vulnerability |
ZDI-20-1214 |
ZDI-CAN-11116 |
Apple |
CVE-2020-9948 |
8.8 |
2020-09-21 |
|
Apple Safari replace Type Confusion Remote Code Execution Vulnerability |
ZDI-20-1213 |
ZDI-CAN-10942 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
|
Apple macOS process_token_BlitFramebuffer Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1212 |
ZDI-CAN-10943 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
|
Apple macOS process_token_CopyPixelsSrcFBO Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1211 |
ZDI-CAN-10944 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
|
Apple macOS process_token_TexSubImage2D Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1210 |
ZDI-CAN-10946 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
|
Apple macOS process_token_TexPBOUpload Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-1209 |
ZDI-CAN-10643 |
Apple |
CVE-2020-9927 |
8.8 |
2020-09-21 |
|
Apple macOS AMDSupport Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1208 |
ZDI-CAN-11502 |
Hewlett Packard Enterprise |
CVE-2020-24623 |
5.3 |
2020-09-21 |
|
Hewlett Packard Enterprise Universal API Framework uaf_token SQL Injection Information Disclosure Vulnerability |
ZDI-20-1207 |
ZDI-CAN-10966 |
Mitsubishi Electric |
CVE-2020-16226 |
9.8 |
2020-09-08 |
2020-09-17 |
Mitsubishi Electric MELSEC iQ-F Predictable TCP Sequence Number Remote Code Execution Vulnerability |
ZDI-20-1206 |
ZDI-CAN-10596 |
Microhard |
CVE-2020-17407 |
9.8 |
2020-08-26 |
2020-09-17 |
Microhard Bullet-LTE Basic Authorization Header Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1205 |
ZDI-CAN-10595 |
Microhard |
CVE-2020-17406 |
8.8 |
2020-08-26 |
2020-09-17 |
Microhard Bullet-LTE Ping Command Injection Remote Code Execution Vulnerability |
ZDI-20-1204 |
ZDI-CAN-11010 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1203 |
ZDI-CAN-10987 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1202 |
ZDI-CAN-10986 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1201 |
ZDI-CAN-10985 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1200 |
ZDI-CAN-10984 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1199 |
ZDI-CAN-10983 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1198 |
ZDI-CAN-10929 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1197 |
ZDI-CAN-10961 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1196 |
ZDI-CAN-10960 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1195 |
ZDI-CAN-10959 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1194 |
ZDI-CAN-10958 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1193 |
ZDI-CAN-10957 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1192 |
ZDI-CAN-10956 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1191 |
ZDI-CAN-10928 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1190 |
ZDI-CAN-10927 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1189 |
ZDI-CAN-10906 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1188 |
ZDI-CAN-10931 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1187 |
ZDI-CAN-10930 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1186 |
ZDI-CAN-10611 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1185 |
ZDI-CAN-11086 |
Apple |
CVE-2020-9919 |
7.8 |
2020-08-05 |
2020-09-17 |
Apple macOS ImageIO PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1184 |
ZDI-CAN-10610 |
Fuji Electric |
|
7.8 |
2020-09-17 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 SIM2 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1183 |
ZDI-CAN-11165 |
Apple |
CVE-2020-9876 |
7.8 |
2020-08-05 |
2020-09-17 |
Apple macOS ImageIO TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1182 |
ZDI-CAN-11106 |
Apple |
CVE-2020-9887 |
7.8 |
2020-09-16 |
|
Apple macOS AppleVPA JPEG Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1181 |
ZDI-CAN-10979 |
VMware |
CVE-2020-3988 |
6.5 |
2020-09-15 |
|
VMware Workstation ThinPrint JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1180 |
ZDI-CAN-11066 |
VMware |
CVE-2020-3987 |
6.5 |
2020-09-15 |
2020-09-15 |
VMware Workstation ThinPrint EMR_STRETCHDIBITS Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1179 |
ZDI-CAN-11065 |
VMware |
CVE-2020-3986 |
6.5 |
2020-09-15 |
2020-09-15 |
VMware Workstation ThinPrint EMF Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1178 |
ZDI-CAN-10923 |
VMware |
CVE-2020-3990 |
6.5 |
2020-09-15 |
|
VMware Workstation ThinPrint TTCHeader Integer Overflow Information Disclosure Vulnerability |
ZDI-20-1177 |
ZDI-CAN-10922 |
VMware |
CVE-2020-3989 |
8.8 |
2020-09-15 |
|
VMware Workstation ThinPrint name Table Integer Overflow Privilege Escalation Vulnerability |
ZDI-20-1176 |
ZDI-CAN-10754 |
NETGEAR |
CVE-2020-17409 |
6.5 |
2020-09-15 |
|
NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability |
ZDI-20-1175 |
ZDI-CAN-11263 |
Microsoft |
CVE-2020-0997 |
7.8 |
2020-10-16 |
|
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1174 |
ZDI-CAN-10146 |
Fatek Automation |
|
7.8 |
2020-09-14 |
|
(0Day) Fatek Automation PLC WinProladder TAB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1173 |
ZDI-CAN-10570 |
Fatek Automation |
|
7.8 |
2020-09-14 |
|
(0Day) Fatek Automation PLC WinProladder SPF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1172 |
ZDI-CAN-11501 |
SAP |
CVE-2020-6361 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1171 |
ZDI-CAN-11500 |
SAP |
CVE-2020-6360 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer DIB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1170 |
ZDI-CAN-11499 |
SAP |
CVE-2020-6359 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer PLT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1169 |
ZDI-CAN-11484 |
SAP |
CVE-2020-6358 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer FBX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1168 |
ZDI-CAN-11340 |
SAP |
CVE-2020-6357 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer U3D File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1167 |
ZDI-CAN-11290 |
SAP |
CVE-2020-6350 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1166 |
ZDI-CAN-11289 |
SAP |
CVE-2020-6349 |
7.8 |
2020-09-10 |
2021-01-27 |
SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1165 |
ZDI-CAN-11286 |
SAP |
CVE-2020-6348 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1164 |
ZDI-CAN-11285 |
SAP |
CVE-2020-6347 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HDR File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1163 |
ZDI-CAN-11284 |
SAP |
CVE-2020-6346 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-1162 |
ZDI-CAN-11283 |
SAP |
CVE-2020-6356 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1161 |
ZDI-CAN-11282 |
SAP |
CVE-2020-6355 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1160 |
ZDI-CAN-11281 |
SAP |
CVE-2020-6345 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer TGA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1159 |
ZDI-CAN-11280 |
SAP |
CVE-2020-6336 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1158 |
ZDI-CAN-11292 |
SAP |
CVE-2020-6354 |
5.3 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1157 |
ZDI-CAN-11291 |
SAP |
CVE-2020-6338 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer RH File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1156 |
ZDI-CAN-11288 |
SAP |
CVE-2020-6339 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1155 |
ZDI-CAN-11287 |
SAP |
CVE-2020-6337 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HDR File Parsing Memory Corruption Remote Code Execution Vulnerabililty |
ZDI-20-1154 |
ZDI-CAN-11275 |
SAP |
CVE-2020-6340 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1153 |
ZDI-CAN-11345 |
SAP |
CVE-2020-6341 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer EPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1152 |
ZDI-CAN-11344 |
SAP |
CVE-2020-6342 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1151 |
ZDI-CAN-11342 |
SAP |
CVE-2020-6343 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1150 |
ZDI-CAN-11294 |
SAP |
CVE-2020-6344 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-1149 |
ZDI-CAN-11272 |
SAP |
CVE-2020-6353 |
5.3 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1148 |
ZDI-CAN-11265 |
SAP |
CVE-2020-6352 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer FBX File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-1147 |
ZDI-CAN-11261 |
SAP |
CVE-2020-6351 |
7.8 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer FBX File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-1146 |
ZDI-CAN-11158 |
SAP |
CVE-2020-6335 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1145 |
ZDI-CAN-11161 |
SAP |
CVE-2020-6334 |
4.5 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1144 |
ZDI-CAN-11159 |
SAP |
CVE-2020-6333 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1143 |
ZDI-CAN-11160 |
SAP |
CVE-2020-6332 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1142 |
ZDI-CAN-11205 |
SAP |
CVE-2020-6331 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1141 |
ZDI-CAN-11152 |
SAP |
CVE-2020-6314 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Untrusted Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-1140 |
ZDI-CAN-10940 |
SAP |
CVE-2020-6321 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer U3D File Parsing 3difr Plugin Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-1139 |
ZDI-CAN-11090 |
SAP |
CVE-2020-6322 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer 3DM File Parsing rhino Plugin Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1138 |
ZDI-CAN-11089 |
SAP |
CVE-2020-6327 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer 3DM File Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-1137 |
ZDI-CAN-11147 |
SAP |
CVE-2020-6328 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer CGM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-1136 |
ZDI-CAN-11113 |
SAP |
CVE-2020-6329 |
4.5 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1135 |
ZDI-CAN-11091 |
SAP |
CVE-2020-6330 |
7.0 |
2020-09-10 |
|
SAP 3D Visual Enterprise Viewer 3DM File Parsing rhino Plugin Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1134 |
ZDI-CAN-11511 |
Microsoft |
CVE-2020-1319 |
8.8 |
2020-09-10 |
|
Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-1133 |
ZDI-CAN-11446 |
Microsoft |
CVE-2020-1594 |
7.8 |
2020-09-10 |
|
Microsoft Excel XLS File SST Record Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1132 |
ZDI-CAN-11276 |
Microsoft |
CVE-2020-1193 |
5.3 |
2020-09-10 |
|
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1131 |
ZDI-CAN-11242 |
Microsoft |
CVE-2020-1338 |
7.8 |
2020-09-10 |
|
Microsoft Word DOCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1130 |
ZDI-CAN-11126 |
Microsoft |
CVE-2020-0914 |
2.5 |
2020-09-10 |
|
Microsoft Windows State Repository Service Race Condition Use-After-Free Information Disclosure Vulnerability |
ZDI-20-1129 |
ZDI-CAN-11215 |
Microsoft |
CVE-2020-1129 |
8.8 |
2020-09-10 |
|
Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1128 |
ZDI-CAN-11153 |
Microsoft |
CVE-2020-1074 |
7.8 |
2020-09-10 |
|
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1127 |
ZDI-CAN-11128 |
Microsoft |
CVE-2020-1039 |
7.8 |
2020-09-10 |
|
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1126 |
ZDI-CAN-11214 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
|
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Multiple Vulnerabilities |
ZDI-20-1125 |
ZDI-CAN-11213 |
Microsoft |
CVE-2020-16856 |
7.8 |
2020-09-10 |
|
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-1124 |
ZDI-CAN-11212 |
Microsoft |
CVE-2020-16874 |
3.3 |
2020-09-10 |
|
Microsoft Visual Studio DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1123 |
ZDI-CAN-10834 |
Microsoft |
CVE-2020-0908 |
6.3 |
2020-09-10 |
|
Microsoft Internet Explorer CTSF3CandidateMessage Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1122 |
ZDI-CAN-11240 |
Microsoft |
CVE-2020-0997 |
7.8 |
2020-09-10 |
|
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1121 |
ZDI-CAN-11156 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
|
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-1120 |
ZDI-CAN-11095 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
|
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-1119 |
ZDI-CAN-11221 |
Adobe |
CVE-2020-9725 |
7.8 |
2020-09-10 |
|
Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1118 |
ZDI-CAN-11110 |
Adobe |
CVE-2020-9726 |
7.8 |
2020-09-10 |
|
Adobe FrameMaker FM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1117 |
ZDI-CAN-10737 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1116 |
ZDI-CAN-10736 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1115 |
ZDI-CAN-10735 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1114 |
ZDI-CAN-10734 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1113 |
ZDI-CAN-10705 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1112 |
ZDI-CAN-10698 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1111 |
ZDI-CAN-10697 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1110 |
ZDI-CAN-10696 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1109 |
ZDI-CAN-10695 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1108 |
ZDI-CAN-10680 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1107 |
ZDI-CAN-10679 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1106 |
ZDI-CAN-10678 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1105 |
ZDI-CAN-10677 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1104 |
ZDI-CAN-10676 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1103 |
ZDI-CAN-10675 |
Fuji Electric |
|
7.8 |
2020-09-08 |
|
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1102 |
ZDI-CAN-10801 |
NEC |
CVE-2020-17408 |
7.5 |
2020-09-08 |
|
NEC ExpressCluster ApplyConfig XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-1101 |
ZDI-CAN-10907 |
Cisco |
CVE-2020-3453 |
6.8 |
2020-09-08 |
|
Cisco RV340 upload.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1100 |
ZDI-CAN-10640 |
Cisco |
CVE-2020-3451 |
5.5 |
2020-09-08 |
|
Cisco RV340 upload.cgi Command Injection Remote Code Execution Vulnerability |
ZDI-20-1099 |
ZDI-CAN-10603 |
Hewlett Packard Enterprise |
CVE-2020-24625 |
7.5 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doGet Directory Traversal Information Disclosure Vulnerability |
ZDI-20-1098 |
ZDI-CAN-10602 |
Hewlett Packard Enterprise |
CVE-2020-24624 |
7.5 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter DownloadServlet execute Directory Traversal Information Disclosure Vulnerability |
ZDI-20-1097 |
ZDI-CAN-10601 |
Hewlett Packard Enterprise |
CVE-2020-24626 |
9.8 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doPost Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1096 |
ZDI-CAN-10790 |
Trend Micro |
CVE-2020-24559 |
7.8 |
2020-08-31 |
|
Trend Micro Apex One Hard Link Privilege Escalation Vulnerability |
ZDI-20-1095 |
ZDI-CAN-10760 |
Trend Micro |
CVE-2020-24558 |
2.5 |
2020-08-31 |
|
Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1094 |
ZDI-CAN-10514 |
Trend Micro |
CVE-2020-24557 |
7.8 |
2020-08-31 |
|
Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability |
ZDI-20-1093 |
ZDI-CAN-10513 |
Trend Micro |
CVE-2020-24556 |
7.8 |
2020-08-31 |
|
Trend Micro Apex One Hard Link Privilege Escalation Vulnerability |
ZDI-20-1092 |
ZDI-CAN-10995 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView NetworkServlet findSummaryCfgDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1091 |
ZDI-CAN-10994 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView NetworkServlet findUpdateDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1090 |
ZDI-CAN-10993 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView NetworkServlet findCfgDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1089 |
ZDI-CAN-10992 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView NetworkServlet findSummaryUpdateDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1088 |
ZDI-CAN-10991 |
Advantech |
CVE-2020-16245 |
9.4 |
2020-08-27 |
|
Advantech iView NetworkServlet backupDatabase Directory Traversal Information Disclosure Vulnerability |
ZDI-20-1087 |
ZDI-CAN-10990 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView TaskMgrTable exportTaskMgrReportDetails Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1086 |
ZDI-CAN-10989 |
Advantech |
CVE-2020-16245 |
8.2 |
2020-08-27 |
|
Advantech iView PSTable exportPSInventoryTable Directory Traversal File Creation Vulnerability |
ZDI-20-1085 |
ZDI-CAN-10988 |
Advantech |
CVE-2020-16245 |
8.2 |
2020-08-27 |
|
Advantech iView DeviceTreeTable exportInventoryTable Directory Traversal File Creation Vulnerability |
ZDI-20-1084 |
ZDI-CAN-10976 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
|
Advantech iView DeviceTreeTable exportTaskMgrReport Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1083 |
ZDI-CAN-11431 |
Trend Micro |
CVE-2020-15605 |
8.1 |
2020-08-27 |
|
Trend Micro Vulnerability Protection Authentication Bypass Vulnerability |
ZDI-20-1082 |
ZDI-CAN-11000 |
Apple |
CVE-2020-9908 |
6.5 |
2020-08-27 |
|
Apple macOS Intel Graphics Driver Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1081 |
ZDI-CAN-10962 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-08-27 |
|
Microsoft Windows hevcdecoder_store MKV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1080 |
ZDI-CAN-10980 |
Senstar |
CVE-2020-17405 |
8.8 |
2020-08-26 |
|
Senstar Symphony SSOAuth Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1079 |
ZDI-CAN-11191 |
Foxit |
CVE-2020-17404 |
7.8 |
2020-08-21 |
|
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1078 |
ZDI-CAN-11003 |
Foxit |
CVE-2020-17403 |
7.8 |
2020-08-21 |
|
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1077 |
ZDI-CAN-11368 |
Trend Micro |
CVE-2020-15601 |
8.1 |
2020-08-21 |
|
Trend Micro Deep Security Manager Authentication Bypass Vulnerability |
ZDI-20-1076 |
ZDI-CAN-10546 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU MultiLink bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1075 |
ZDI-CAN-10543 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU Alarm bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1074 |
ZDI-CAN-10542 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU Disc WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1073 |
ZDI-CAN-10541 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU Disc WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1072 |
ZDI-CAN-10540 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU Disc WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1071 |
ZDI-CAN-10528 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU TrendSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1070 |
ZDI-CAN-10489 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU AlarmSet bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1069 |
ZDI-CAN-10548 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU AlarmSet WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1068 |
ZDI-CAN-10547 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU WordAlarmSet WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1067 |
ZDI-CAN-10545 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU MultiLink WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1066 |
ZDI-CAN-10544 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU WebSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1065 |
ZDI-CAN-10539 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU DiscSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1064 |
ZDI-CAN-10538 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU DiscSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1063 |
ZDI-CAN-10537 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU XYSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1062 |
ZDI-CAN-10536 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU XYSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1061 |
ZDI-CAN-10535 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU XYSet WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1060 |
ZDI-CAN-10534 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU XYSet WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1059 |
ZDI-CAN-10533 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU XYSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1058 |
ZDI-CAN-10532 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU TrendSet WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1057 |
ZDI-CAN-10531 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU TrendSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1056 |
ZDI-CAN-10530 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU TrendSet WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1055 |
ZDI-CAN-10529 |
WECON |
|
7.8 |
2020-08-19 |
|
(0Day) WECON LeviStudioU TrendSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-1054 |
ZDI-CAN-10441 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1053 |
ZDI-CAN-10440 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition attendees fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1052 |
ZDI-CAN-10439 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition fb fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1051 |
ZDI-CAN-10436 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Sort sortpref Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1050 |
ZDI-CAN-10435 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Poll nav_poll Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1049 |
ZDI-CAN-10434 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Remote Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1048 |
ZDI-CAN-10433 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Event event_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1047 |
ZDI-CAN-10432 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition CalendarsManager _checkDisplayCals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1046 |
ZDI-CAN-10431 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Search filter Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1045 |
ZDI-CAN-10430 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Search vfolder Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1044 |
ZDI-CAN-10429 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Flags msgflags Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1043 |
ZDI-CAN-10428 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Expanded expanded_folders Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1042 |
ZDI-CAN-10427 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Upgrade upgrade_tasks Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1041 |
ZDI-CAN-10426 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Horde last_logintasks Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1040 |
ZDI-CAN-10425 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Compose reply_lang Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1039 |
ZDI-CAN-10458 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1038 |
ZDI-CAN-10457 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Nag show_external Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1037 |
ZDI-CAN-10456 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1036 |
ZDI-CAN-10455 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1035 |
ZDI-CAN-10454 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1034 |
ZDI-CAN-10453 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition List tasklist_columns Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1033 |
ZDI-CAN-10452 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Task task_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1032 |
ZDI-CAN-10451 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1031 |
ZDI-CAN-10450 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1030 |
ZDI-CAN-10449 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Ui generateUI Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1029 |
ZDI-CAN-10448 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1028 |
ZDI-CAN-10447 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Mnemo display_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1027 |
ZDI-CAN-10446 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1026 |
ZDI-CAN-10445 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Kronolith show_time Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1025 |
ZDI-CAN-10444 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1024 |
ZDI-CAN-10443 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Collection portal_layout Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1023 |
ZDI-CAN-10442 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1022 |
ZDI-CAN-10438 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition remote_edit remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1021 |
ZDI-CAN-10437 |
Horde |
|
6.3 |
2020-08-19 |
|
(0Day) Horde Groupware Webmail Edition remote_unsubscribe remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-1020 |
ZDI-CAN-11063 |
Parallels |
CVE-2020-17402 |
6.5 |
2020-08-18 |
2024-07-08 |
Parallels Desktop prl_hypervisor Incorrect Permission Assignment for Critical Resource Information Disclosure Vulnerability |
ZDI-20-1019 |
ZDI-CAN-11363 |
Parallels |
CVE-2020-17401 |
6.0 |
2020-08-18 |
|
Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1018 |
ZDI-CAN-11304 |
Parallels |
CVE-2020-17400 |
8.8 |
2020-08-18 |
|
Parallels Desktop prl_hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability |
ZDI-20-1017 |
ZDI-CAN-11303 |
Parallels |
CVE-2020-17399 |
8.8 |
2020-08-18 |
|
Parallels Desktop prl_hypervisor Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-1016 |
ZDI-CAN-11302 |
Parallels |
CVE-2020-17398 |
6.5 |
2020-08-18 |
|
Parallels Desktop prl_hypervisor Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1015 |
ZDI-CAN-11253 |
Parallels |
CVE-2020-17397 |
7.5 |
2020-08-18 |
|
Parallels Desktop Networking Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-1014 |
ZDI-CAN-11217 |
Parallels |
CVE-2020-17396 |
8.8 |
2020-08-18 |
|
Parallels Desktop prl_hypervisor Integer Overflow Privilege Escalation Vulnerability |
ZDI-20-1013 |
ZDI-CAN-11134 |
Parallels |
CVE-2020-17395 |
7.5 |
2020-08-18 |
|
Parallels Desktop Networking Service Integer Underflow Privilege Escalation Vulnerability |
ZDI-20-1012 |
ZDI-CAN-11132 |
Parallels |
CVE-2020-17394 |
6.0 |
2020-08-18 |
|
Parallels Desktop OEMNet Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1011 |
ZDI-CAN-10520 |
Parallels |
CVE-2020-17393 |
6.5 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Improper Input Validation Information Disclosure Vulnerability |
ZDI-20-1010 |
ZDI-CAN-10519 |
Parallels |
CVE-2020-17392 |
8.8 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Untrusted Pointer Dereference Privilege Escalation Vulnerability |
ZDI-20-1009 |
ZDI-CAN-10518 |
Parallels |
CVE-2020-17391 |
6.5 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Exposed Dangerous Method Information Disclosure Vulnerability |
ZDI-20-1008 |
ZDI-CAN-10030 |
Parallels |
CVE-2020-17390 |
3.8 |
2020-08-18 |
|
Parallels Desktop hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability |
ZDI-20-1007 |
ZDI-CAN-10605 |
Schneider Electric |
CVE-2020-7522 |
9.8 |
2020-08-17 |
|
Schneider Electric APC Easy UPS Online SoundUploadServlet processRequest Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1006 |
ZDI-CAN-10604 |
Schneider Electric |
CVE-2020-7521 |
9.8 |
2020-08-17 |
|
Schneider Electric APC Easy UPS Online FileUploadServlet processRequest Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-1005 |
ZDI-CAN-10892 |
QEMU |
CVE-2020-10756 |
6.5 |
2020-08-17 |
|
QEMU SLiRP Networking Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-1004 |
ZDI-CAN-10937 |
Microsoft |
CVE-2020-1492 |
8.8 |
2020-08-14 |
|
Microsoft Windows QuickTime Video Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1003 |
ZDI-CAN-10816 |
Microsoft |
CVE-2020-1561 |
5.0 |
2020-08-14 |
|
Microsoft Windows fontdrvhost Font Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-1002 |
ZDI-CAN-11006 |
Microsoft |
CVE-2020-1560 |
7.8 |
2020-08-14 |
|
Microsoft Windows av1decodermft_store MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-1001 |
ZDI-CAN-10925 |
Microsoft |
CVE-2020-1555 |
7.5 |
2020-08-14 |
|
Microsoft Chakra Inline Cache Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-1000 |
ZDI-CAN-10974 |
Microsoft |
CVE-2020-1581 |
7.8 |
2020-08-13 |
|
Microsoft Office OfficeClickToRun Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-999 |
ZDI-CAN-10914 |
Microsoft |
CVE-2020-1493 |
7.8 |
2020-08-13 |
|
Microsoft Outlook EML Rendering Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-998 |
ZDI-CAN-10908 |
Microsoft |
CVE-2020-1520 |
7.8 |
2020-08-13 |
|
Microsoft Windows PFB Font File Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-997 |
ZDI-CAN-11590 |
Microsoft |
CVE-2020-1556 |
2.5 |
2020-08-13 |
|
Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability |
ZDI-20-996 |
ZDI-CAN-11589 |
Microsoft |
CVE-2020-1556 |
2.5 |
2020-08-13 |
|
Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability |
ZDI-20-995 |
ZDI-CAN-11136 |
Microsoft |
CVE-2020-1337 |
7.8 |
2020-08-13 |
|
Microsoft Windows Print Spooler Directory Junction Privilege Escalation Vulnerability |
ZDI-20-994 |
ZDI-CAN-10812 |
Microsoft |
CVE-2020-1577 |
3.3 |
2020-08-13 |
|
Microsoft Windows findBaseLigature TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-993 |
ZDI-CAN-11007 |
Microsoft |
CVE-2020-1585 |
7.8 |
2020-08-13 |
|
Microsoft Windows av1decodermft_store AVIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-992 |
ZDI-CAN-10609 |
Microsoft |
CVE-2020-1574 |
8.8 |
2020-08-13 |
|
Microsoft Windows WEBP VP8X Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-991 |
ZDI-CAN-11254 |
Adobe |
CVE-2020-9715 |
7.8 |
2020-08-12 |
|
Adobe Acrobat Reader DC ESObject Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-990 |
ZDI-CAN-11166 |
Adobe |
CVE-2020-9712 |
3.3 |
2020-08-12 |
|
Adobe Acrobat Pro DC Web2PDF:AppLinks JavaScript Restrictions Bypass Vulnerability |
ZDI-20-989 |
ZDI-CAN-11164 |
Adobe |
CVE-2020-9710 |
3.3 |
2020-08-12 |
2020-08-19 |
Adobe Acrobat Pro DC convert Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-988 |
ZDI-CAN-11162 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
|
Adobe Acrobat Pro DC updateFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-987 |
ZDI-CAN-11150 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
|
Adobe Acrobat Pro DC removeFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-986 |
ZDI-CAN-11149 |
Adobe |
CVE-2020-9707 |
3.3 |
2020-08-12 |
|
Adobe Acrobat Pro DC selectFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-985 |
ZDI-CAN-11148 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
|
Adobe Acrobat Pro DC addFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-984 |
ZDI-CAN-11105 |
Adobe |
CVE-2020-9697 |
5.5 |
2020-08-12 |
|
Adobe Acrobat Reader DC app.measureDialog Information Disclosure Vulnerability |
ZDI-20-983 |
ZDI-CAN-11026 |
Adobe |
CVE-2020-9694 |
7.8 |
2020-08-12 |
|
Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-982 |
ZDI-CAN-11025 |
Adobe |
CVE-2020-9693 |
7.8 |
2020-08-12 |
|
Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-981 |
ZDI-CAN-11561 |
Canonical |
CVE-2020-15708 |
7.8 |
2020-08-11 |
|
Canonical Ubuntu Virtualization Library Arbitrary File Write Privilege Escalation Vulnerability |
ZDI-20-980 |
ZDI-CAN-11504 |
Canonical |
CVE-2020-15704 |
5.5 |
2020-08-11 |
|
Canonical Ubuntu Point-to-Point Protocol Daemon Arbitrary File Read Information Disclosure Vulnerability |
ZDI-20-979 |
ZDI-CAN-11234 |
Canonical |
CVE-2020-15702 |
7.0 |
2020-08-11 |
|
Canonical Ubuntu apport Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-978 |
ZDI-CAN-11233 |
Canonical |
CVE-2020-11936 |
2.5 |
2020-08-11 |
|
Canonical Ubuntu apport Unnecessary Privileges Information Disclosure Vulnerability |
ZDI-20-977 |
ZDI-CAN-10333 |
Micro Focus |
|
6.3 |
2020-08-10 |
2021-06-29 |
Micro Focus Secure Messaging Gateway manage_domains_save_data SaveData Command Injection Remote Code Execution Vulnerability |
ZDI-20-976 |
ZDI-CAN-10502 |
Marvell |
CVE-2020-17389 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole GWTTestServiceImpl decryptFile Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-975 |
ZDI-CAN-10799 |
Marvell |
CVE-2020-17388 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole Exposed Dangerous Method or Function Remote Code Execution |
ZDI-20-974 |
ZDI-CAN-10565 |
Marvell |
CVE-2020-17387 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole writeObjectToConfigFile Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-973 |
ZDI-CAN-10553 |
Marvell |
CVE-2020-15645 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-972 |
ZDI-CAN-10550 |
Marvell |
CVE-2020-15644 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole setAppFileBytes Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-971 |
ZDI-CAN-10549 |
Marvell |
CVE-2020-15643 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-970 |
ZDI-CAN-10501 |
Marvell |
CVE-2020-15642 |
8.8 |
2020-08-10 |
|
Marvell QConvergeConsole isHPSmartComponent Command Injection Remote Code Execution Vulnerability |
ZDI-20-969 |
ZDI-CAN-10499 |
Marvell |
CVE-2020-15641 |
7.5 |
2020-08-10 |
|
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability |
ZDI-20-968 |
ZDI-CAN-10497 |
Marvell |
CVE-2020-15640 |
7.5 |
2020-08-10 |
|
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability |
ZDI-20-967 |
ZDI-CAN-10496 |
Marvell |
CVE-2020-15639 |
9.8 |
2020-08-10 |
|
Marvell QConvergeConsole decryptFile Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-966 |
ZDI-CAN-11041 |
Delta Industrial Automation |
CVE-2020-16223 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-965 |
ZDI-CAN-10667 |
Delta Industrial Automation |
CVE-2020-16227 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-964 |
ZDI-CAN-10726 |
Delta Industrial Automation |
CVE-2020-16225 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Write-what-where Condition Remote Code Execution Vulnerability |
ZDI-20-963 |
ZDI-CAN-8564 |
Delta Industrial Automation |
CVE-2020-16219 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-962 |
ZDI-CAN-10130 |
Delta Industrial Automation |
CVE-2020-16221 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-961 |
ZDI-CAN-10128 |
Delta Industrial Automation |
CVE-2020-16219 |
7.8 |
2020-08-10 |
|
Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-960 |
ZDI-CAN-10778 |
Apple |
CVE-2020-9939 |
8.2 |
2020-08-10 |
2021-06-29 |
(Pwn2Own) Apple macOS kextload Time-Of-Check Time-Of-Use Memory Corruption Vulnerability |
ZDI-20-959 |
ZDI-CAN-10122 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-958 |
ZDI-CAN-10133 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-957 |
ZDI-CAN-10134 |
Advantech |
CVE-2020-16211 |
3.3 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-956 |
ZDI-CAN-10135 |
Advantech |
CVE-2020-16213 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-955 |
ZDI-CAN-10136 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-954 |
ZDI-CAN-10139 |
Advantech |
CVE-2020-16229 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-953 |
ZDI-CAN-10144 |
Advantech |
CVE-2020-16215 |
9.8 |
2020-08-10 |
|
Advantech WebAccess IOCTL 0x2711 BwPFile Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-952 |
ZDI-CAN-10187 |
Advantech |
CVE-2020-16217 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Double Free Remote Code Execution Vulnerability |
ZDI-20-951 |
ZDI-CAN-10188 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-950 |
ZDI-CAN-10121 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
|
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-949 |
ZDI-CAN-11543 |
FreeBSD |
CVE-2020-7460 |
8.8 |
2020-08-06 |
|
FreeBSD Kernel sendmsg System Call Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-948 |
ZDI-CAN-10893 |
Delta Industrial Automation |
CVE-2020-16203 |
7.8 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Uninitialized Pointer Dereference Remote Code Execution Vulnerability |
ZDI-20-947 |
ZDI-CAN-10888 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-946 |
ZDI-CAN-10887 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-945 |
ZDI-CAN-10885 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-944 |
ZDI-CAN-10883 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-943 |
ZDI-CAN-10881 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-942 |
ZDI-CAN-10882 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-941 |
ZDI-CAN-10886 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-940 |
ZDI-CAN-10889 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-939 |
ZDI-CAN-10890 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-938 |
ZDI-CAN-11151 |
Apple |
CVE-2020-9875 |
7.8 |
2020-08-05 |
|
Apple macOS ImageIO EXR Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-937 |
ZDI-CAN-9852 |
NETGEAR |
CVE-2020-15636 |
8.1 |
2020-08-04 |
|
NETGEAR Multiple Routers check_ra Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-936 |
ZDI-CAN-9853 |
NETGEAR |
CVE-2020-15635 |
8.8 |
2020-08-04 |
|
NETGEAR R6700 acsd Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-935 |
ZDI-CAN-9755 |
NETGEAR |
CVE-2020-15634 |
6.3 |
2020-08-04 |
|
NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability |
ZDI-20-934 |
ZDI-CAN-11426 |
X.Org |
CVE-2020-14347 |
5.5 |
2020-08-04 |
|
X.Org Server Pixel Data Uninitialized Memory Information Disclosure Vulnerability |
ZDI-20-933 |
ZDI-CAN-10950 |
Foxit |
CVE-2020-15638 |
7.8 |
2020-08-04 |
|
Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability |
ZDI-20-932 |
ZDI-CAN-10972 |
Foxit |
CVE-2020-15637 |
3.3 |
2020-08-04 |
|
Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability |
ZDI-20-931 |
ZDI-CAN-10559 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-930 |
ZDI-CAN-10558 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-929 |
ZDI-CAN-10557 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-928 |
ZDI-CAN-10556 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-927 |
ZDI-CAN-10555 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-926 |
ZDI-CAN-10554 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-925 |
ZDI-CAN-10332 |
IBM |
|
7.5 |
2020-07-28 |
|
(0Day) IBM Informix bts_tracefile Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-924 |
ZDI-CAN-11121 |
Microsoft |
CVE-2020-1400 |
7.0 |
2020-07-23 |
|
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability |
ZDI-20-923 |
ZDI-CAN-10895 |
Microsoft |
CVE-2020-1421 |
8.8 |
2020-07-23 |
|
Microsoft Windows LNK File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-922 |
ZDI-CAN-10875 |
Adobe |
CVE-2020-9680 |
7.8 |
2020-07-22 |
|
Adobe Prelude MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-921 |
ZDI-CAN-10874 |
Adobe |
CVE-2020-9679 |
3.3 |
2020-07-22 |
|
Adobe Prelude MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-920 |
ZDI-CAN-10873 |
Adobe |
CVE-2020-9678 |
7.8 |
2020-07-22 |
|
Adobe Prelude MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-919 |
ZDI-CAN-10872 |
Adobe |
CVE-2020-9677 |
7.8 |
2020-07-22 |
|
Adobe Prelude 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-918 |
ZDI-CAN-10863 |
Adobe |
CVE-2020-9687 |
7.8 |
2020-07-22 |
|
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-917 |
ZDI-CAN-10862 |
Adobe |
CVE-2020-9686 |
3.3 |
2020-07-22 |
|
Adobe Photoshop MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-916 |
ZDI-CAN-10861 |
Adobe |
CVE-2020-9685 |
7.8 |
2020-07-22 |
|
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-915 |
ZDI-CAN-10860 |
Adobe |
CVE-2020-9684 |
7.8 |
2020-07-22 |
|
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-914 |
ZDI-CAN-10859 |
Adobe |
CVE-2020-9683 |
7.8 |
2020-07-22 |
|
Adobe Photoshop 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-913 |
ZDI-CAN-10858 |
Adobe |
CVE-2020-9674 |
7.8 |
2020-07-22 |
|
Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-912 |
ZDI-CAN-10857 |
Adobe |
CVE-2020-9676 |
7.8 |
2020-07-22 |
|
Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-911 |
ZDI-CAN-10856 |
Adobe |
CVE-2020-9675 |
7.8 |
2020-07-22 |
|
Adobe Bridge 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-910 |
ZDI-CAN-11107 |
Apple |
CVE-2020-9936 |
7.8 |
2020-07-21 |
|
Apple macOS decodePICT PIC Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-909 |
ZDI-CAN-10832 |
Apple |
CVE-2020-9894 |
4.3 |
2020-07-21 |
|
Apple Safari getAnimations Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-908 |
ZDI-CAN-10653 |
Apple |
CVE-2020-9884 |
7.8 |
2020-07-21 |
|
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-907 |
ZDI-CAN-10111 |
Apple |
CVE-2020-9893 |
7.5 |
2020-07-21 |
|
Apple Safari RenderWidget Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-906 |
ZDI-CAN-10686 |
Microsoft |
|
3.3 |
2020-07-20 |
|
(0Day) Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-905 |
ZDI-CAN-11274 |
Oracle |
CVE-2020-14703 |
6.0 |
2020-07-20 |
|
Oracle VirtualBox e1000 Unintialized Memory Information Disclosure Vulnerability |
ZDI-20-904 |
ZDI-CAN-11273 |
Oracle |
CVE-2020-14704 |
6.0 |
2020-07-20 |
|
Oracle VirtualBox BusLogicSCSI Uninitialized Memory Information Disclosure Vulnerability |
ZDI-20-903 |
ZDI-CAN-11140 |
Oracle |
CVE-2020-14700 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-902 |
ZDI-CAN-11138 |
Oracle |
CVE-2020-14699 |
7.5 |
2020-07-20 |
|
Oracle VirtualBox e1000 Integer Underflow Privilege Escalation Vulnerability |
ZDI-20-901 |
ZDI-CAN-11137 |
Oracle |
CVE-2020-14698 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox virtio-net Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-900 |
ZDI-CAN-11145 |
Oracle |
CVE-2020-14695 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-899 |
ZDI-CAN-11142 |
Oracle |
CVE-2020-14694 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-898 |
ZDI-CAN-11028 |
Oracle |
CVE-2020-14673 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
ZDI-20-897 |
ZDI-CAN-10965 |
Oracle |
CVE-2020-14664 |
7.8 |
2020-07-20 |
|
Oracle Java Runtime Environment HTML Rendering Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-896 |
ZDI-CAN-10954 |
Oracle |
CVE-2020-14674 |
7.5 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-895 |
ZDI-CAN-10900 |
Oracle |
CVE-2020-14675 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-894 |
ZDI-CAN-10899 |
Oracle |
CVE-2020-14676 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-893 |
ZDI-CAN-10898 |
Oracle |
CVE-2020-14677 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-892 |
ZDI-CAN-10978 |
Oracle |
CVE-2020-14650 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
ZDI-20-891 |
ZDI-CAN-10953 |
Oracle |
CVE-2020-14649 |
7.5 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-890 |
ZDI-CAN-10952 |
Oracle |
CVE-2020-14647 |
7.5 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-889 |
ZDI-CAN-10951 |
Oracle |
CVE-2020-14648 |
5.3 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
ZDI-20-888 |
ZDI-CAN-10913 |
Oracle |
CVE-2020-14646 |
7.5 |
2020-07-20 |
|
Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-887 |
ZDI-CAN-10795 |
Oracle |
CVE-2020-14629 |
6.0 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox virtio-net Uninitialized Memory Information Disclosure Vulnerability |
ZDI-20-886 |
ZDI-CAN-10762 |
Oracle |
CVE-2020-14628 |
8.2 |
2020-07-20 |
|
Oracle VirtualBox Guest Additions Unnecessary Privileges Local Privilege Escalation Vulnerability |
ZDI-20-885 |
ZDI-CAN-10741 |
Oracle |
CVE-2020-14625 |
9.8 |
2020-07-20 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-884 |
ZDI-CAN-10846 |
Adobe |
CVE-2020-9650 |
7.8 |
2020-07-20 |
|
Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-883 |
ZDI-CAN-10838 |
Adobe |
CVE-2020-9646 |
7.8 |
2020-07-20 |
|
Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-882 |
ZDI-CAN-10830 |
Adobe |
CVE-2020-9649 |
7.8 |
2020-07-20 |
|
Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-881 |
ZDI-CAN-10835 |
D-Link |
CVE-2020-15633 |
8.8 |
2020-07-20 |
|
D-Link Multiple Routers HNAP GetCAPTCHAsetting Authentication Bypass Vulnerability |
ZDI-20-880 |
ZDI-CAN-10083 |
D-Link |
CVE-2020-15632 |
8.8 |
2020-07-20 |
|
D-Link DIR-842 HNAP GetCAPTCHAsetting Authentication Bypass Vulnerability |
ZDI-20-879 |
ZDI-CAN-10084 |
D-Link |
CVE-2020-15631 |
8.0 |
2020-07-20 |
|
D-Link DAP-1860 HNAP SOAPAction Command Injection Remote Code Execution Vulnerability |
ZDI-20-878 |
ZDI-CAN-10767 |
IBM |
CVE-2020-4464 |
9.8 |
2020-07-20 |
|
IBM WebSphere Application Server SOAP Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-877 |
ZDI-CAN-10903 |
Microsoft |
CVE-2020-1436 |
7.8 |
2020-07-16 |
|
Microsoft Windows PFB Font File Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-876 |
ZDI-CAN-10831 |
Microsoft |
CVE-2020-0987 |
3.3 |
2020-07-16 |
|
Microsoft Windows mf3216 EMF EMR_SETDIBITSTODEVICE Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-875 |
ZDI-CAN-10808 |
Microsoft |
CVE-2020-1355 |
6.3 |
2020-07-16 |
|
Microsoft Windows fontdrvhost Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-874 |
ZDI-CAN-10963 |
Microsoft |
CVE-2020-1439 |
8.8 |
2020-07-16 |
|
Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-873 |
ZDI-CAN-10781 |
Microsoft |
CVE-2020-1382 |
7.8 |
2020-07-16 |
|
(Pwn2Own) Microsoft Windows DirectComposition RemoveBindingManagerReferenceFromTrackerIfNecessary Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-872 |
ZDI-CAN-10779 |
Microsoft |
CVE-2020-1381 |
7.8 |
2020-07-16 |
|
(Pwn2Own) Microsoft Windows DirectComposition SetBufferProperty Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-871 |
ZDI-CAN-10977 |
Foxit |
CVE-2020-15630 |
3.3 |
2020-07-16 |
|
Foxit Studio Photo PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-870 |
ZDI-CAN-10764 |
Foxit |
CVE-2020-15629 |
7.8 |
2020-07-16 |
|
Foxit Studio Photo TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-869 |
ZDI-CAN-10716 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable getTaskEditorSearchDevices SQL Injection Remote Code Execution Vulnerability |
ZDI-20-868 |
ZDI-CAN-10707 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable updateSelected SQL Injection Information Disclosure Vulnerability |
ZDI-20-867 |
ZDI-CAN-10701 |
Advantech |
CVE-2020-14499 |
7.5 |
2020-07-16 |
|
Advantech iView UserServlet getAllUsersAccountInfo Improper Access Control Information Disclosure Vulnerability |
ZDI-20-866 |
ZDI-CAN-10708 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable getDeviceCount SQL Injection Remote Code Execution Vulnerability |
ZDI-20-865 |
ZDI-CAN-10717 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView DeviceTreeTable getUpdateDeviceListDetails SQL Injection Information Disclosure Vulnerability |
ZDI-20-864 |
ZDI-CAN-10706 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable clearTaskEditorTable SQL Injection Information Disclosure Vulnerability |
ZDI-20-863 |
ZDI-CAN-10704 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable initTaskEditorSearchValues SQL Injection Remote Code Execution Vulnerability |
ZDI-20-862 |
ZDI-CAN-10703 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView User setUserAccountInfo SQL Injection Information Disclosure Vulnerability |
ZDI-20-861 |
ZDI-CAN-10702 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView User addUser SQL Injection Information Disclosure Vulnerability |
ZDI-20-860 |
ZDI-CAN-10700 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView User checkForDuplicateUserName SQL Injection Remote Code Execution Vulnerability |
ZDI-20-859 |
ZDI-CAN-10699 |
Advantech |
CVE-2020-14501 |
8.2 |
2020-07-16 |
|
Advantech iView UserServlet performDeleteUser Missing Authentication for Critical Function Information Disclosure Vulnerability |
ZDI-20-858 |
ZDI-CAN-10673 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable updateDeviceAuthentication SQL Injection Information Disclosure Vulnerability |
ZDI-20-857 |
ZDI-CAN-10970 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView LinksTable deleteLinks SQL Injection Remote code Execution Vulnerability |
ZDI-20-856 |
ZDI-CAN-10672 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView DeviceTreeTable setDeviceAuthentication SQL Injection Information Disclosure Vulnerability |
ZDI-20-855 |
ZDI-CAN-10671 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView UpdateTable insertUpdateItem SQL Injection Information Disclosure Vulnerability |
ZDI-20-854 |
ZDI-CAN-10670 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView ZTPConfigTable findConfiguration SQL Injection Remote Code Execution Vulnerability |
ZDI-20-853 |
ZDI-CAN-10669 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView TaskEditDeviceTable updateSelectedPROMVersion SQL Injection Information Disclosure Vulnerability |
ZDI-20-852 |
ZDI-CAN-10668 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView DeviceTreeTable updateSegmentInfo SQL Injection Information Disclosure Vulnerability |
ZDI-20-851 |
ZDI-CAN-10661 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView ZTPConfigTable findConfiguration SQL Injection Remote Code Execution Vulnerability |
ZDI-20-850 |
ZDI-CAN-10660 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TaskMgrTable getExportDataDetails SQL Injection Remote Code Execution Vulnerability |
ZDI-20-849 |
ZDI-CAN-10659 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TaskMgrTable getExportData SQL Injection Remote Code Execution Vulnerability |
ZDI-20-848 |
ZDI-CAN-10631 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
ZDI-20-847 |
ZDI-CAN-10630 |
Advantech |
CVE-2020-14507 |
9.8 |
2020-07-16 |
|
Advantech iView LinksTable exportLinks Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-846 |
ZDI-CAN-10629 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TrapTable retrieveActiveTrapCount SQL Injection Remote Code Execution Vulnerability |
ZDI-20-845 |
ZDI-CAN-10628 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView DeviceTreeTable getInventoryReportData SQL Injection Remote Code Execution Vulnerability |
ZDI-20-844 |
ZDI-CAN-10627 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView TrapEventConfig retrieveDeviceTrapConfig SQL Injection Remote Code Execution Vulnerability |
ZDI-20-843 |
ZDI-CAN-10626 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView ConfigurationTable setConfigurationItem SQL Injection Information Disclosure Vulnerability |
ZDI-20-842 |
ZDI-CAN-10625 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability |
ZDI-20-841 |
ZDI-CAN-10623 |
Advantech |
CVE-2020-14507 |
9.8 |
2020-07-16 |
|
Advantech iView NetworkServlet Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-840 |
ZDI-CAN-10622 |
Advantech |
CVE-2020-14507 |
7.5 |
2020-07-16 |
|
Advantech iView MenuServlet Directory Traversal Information Disclosure Vulnerability |
ZDI-20-839 |
ZDI-CAN-10621 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView UserServlet SQL Injection Remote Code Execution Vulnerability |
ZDI-20-838 |
ZDI-CAN-10658 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView DeviceTreeTable getInventoryExportData SQL Injection Remote Code Execution Vulnerability |
ZDI-20-837 |
ZDI-CAN-10657 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView PSTable getPSInventoryExportData SQL Injection Remote Code Execution Vulnerability |
ZDI-20-836 |
ZDI-CAN-10656 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView DeviceTreeTable updateNamingData SQL Injection Information Disclosure Vulnerability |
ZDI-20-835 |
ZDI-CAN-10655 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView SystemTable updateLDAPSettings SQL Injection Information Disclosure Vulnerability |
ZDI-20-834 |
ZDI-CAN-10646 |
Advantech |
CVE-2020-14503 |
9.8 |
2020-07-16 |
|
Advantech iView NetworkServlet Improper Input Validation Remote Code Execution Vulnerability |
ZDI-20-833 |
ZDI-CAN-10633 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView DeviceTreeTable checkForChassisUpdates SQL Injection Remote Code Execution Vulnerability |
ZDI-20-832 |
ZDI-CAN-10632 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
ZDI-20-831 |
ZDI-CAN-10645 |
Advantech |
CVE-2020-14505 |
9.8 |
2020-07-16 |
|
Advantech iView NetworkServlet restoreDatabase Command Injection Remote Code Execution Vulnerability |
ZDI-20-830 |
ZDI-CAN-10637 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
|
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
ZDI-20-829 |
ZDI-CAN-10636 |
Advantech |
CVE-2020-14507 |
7.5 |
2020-07-16 |
|
Advantech iView ZTPConfig importZtpConfiguration Directory Traversal Information Disclosure Vulnerability |
ZDI-20-828 |
ZDI-CAN-10635 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability |
ZDI-20-827 |
ZDI-CAN-10634 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
|
Advantech iView LinksTable retrieveSearchLinks SQL Injection Remote Code Execution Vulnerability |
ZDI-20-826 |
ZDI-CAN-10586 |
Phoenix Contact |
CVE-2020-12498 |
7.8 |
2020-07-10 |
|
Phoenix Contact Automationworx PC WORX MWE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-825 |
ZDI-CAN-10147 |
Phoenix Contact |
CVE-2020-12497 |
7.8 |
2020-07-10 |
|
Phoenix Contact Automationworx PLCOpen XML File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-824 |
ZDI-CAN-10290 |
Rockwell Automation |
CVE-2020-12025 |
3.3 |
2020-07-09 |
2021-06-29 |
(0Day) (Pwn2Own) Rockwell Automation Studio 5000 AML File Parsing XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-823 |
ZDI-CAN-10579 |
Apple |
CVE-2020-9815 |
3.3 |
2020-07-09 |
|
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-822 |
ZDI-CAN-10710 |
Veeam |
CVE-2020-15419 |
7.5 |
2020-07-08 |
|
Veeam ONE Reporter_ImportLicense Page_Load XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-821 |
ZDI-CAN-10709 |
Veeam |
CVE-2020-15418 |
7.5 |
2020-07-08 |
|
Veeam ONE SSRSReport GetCustomElementText XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-820 |
ZDI-CAN-10896 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-07-08 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-819 |
ZDI-CAN-10765 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-818 |
ZDI-CAN-10692 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-817 |
ZDI-CAN-10685 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-08 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-816 |
ZDI-CAN-10684 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-815 |
ZDI-CAN-10936 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-07 |
|
Microsoft Windows hevcdecoder_store MKV File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-814 |
ZDI-CAN-10470 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-813 |
ZDI-CAN-10374 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-812 |
ZDI-CAN-10373 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-811 |
ZDI-CAN-10129 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
2021-06-29 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-810 |
ZDI-CAN-10186 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
|
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-809 |
ZDI-CAN-10527 |
C-MORE |
CVE-2020-10922 |
7.5 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability |
ZDI-20-808 |
ZDI-CAN-10493 |
C-MORE |
CVE-2020-10920 |
9.8 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 Control Port Missing Authentication for Critical Function Remote Code Execution Vulnerability |
ZDI-20-807 |
ZDI-CAN-10482 |
C-MORE |
CVE-2020-10921 |
9.8 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 EA-HTTP Missing Authentication for Critical Function Remote Code Execution Vulnerability |
ZDI-20-806 |
ZDI-CAN-10185 |
C-MORE |
CVE-2020-10919 |
5.9 |
2020-07-07 |
2020-10-08 |
C-MORE HMI EA9 Weak Cryptography for Passwords Information Disclosure Vulnerability |
ZDI-20-805 |
ZDI-CAN-10182 |
C-MORE |
CVE-2020-10918 |
7.5 |
2020-07-07 |
2020-11-24 |
C-MORE HMI EA9 Authentication Bypass Vulnerability |
ZDI-20-804 |
ZDI-CAN-10690 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-07 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-803 |
ZDI-CAN-10071 |
Check Point |
CVE-2020-6013 |
7.5 |
2020-07-02 |
|
Check Point ZoneAlarm Symlink Following Privilege Escalation Vulnerability |
ZDI-20-802 |
ZDI-CAN-10683 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-01 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-801 |
ZDI-CAN-10687 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-07-01 |
|
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-800 |
ZDI-CAN-10273 |
ICONICS |
|
7.8 |
2020-07-01 |
|
(Pwn2Own) ICONICS Genesis64 PKGX Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability |
ZDI-20-799 |
ZDI-CAN-10471 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing EnRcpNoName Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-798 |
ZDI-CAN-10459 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-797 |
ZDI-CAN-10183 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-796 |
ZDI-CAN-10472 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-795 |
ZDI-CAN-10480 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-794 |
ZDI-CAN-10481 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-793 |
ZDI-CAN-10483 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-792 |
ZDI-CAN-10494 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-791 |
ZDI-CAN-10508 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-790 |
ZDI-CAN-10509 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-789 |
ZDI-CAN-10571 |
Delta Industrial Automation |
|
7.8 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-788 |
ZDI-CAN-10572 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-787 |
ZDI-CAN-10184 |
Delta Industrial Automation |
|
3.3 |
2020-07-01 |
|
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-786 |
ZDI-CAN-10891 |
VMware |
CVE-2020-3969 |
8.8 |
2020-06-30 |
2021-06-29 |
VMware Workstation SVGA3D Command Heap Overflow Privilege Escalation Vulnerability |
ZDI-20-785 |
ZDI-CAN-10786 |
VMware |
CVE-2020-3962 |
8.2 |
2020-06-30 |
|
VMware Workstation SVGA DXInvalidateContext Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-784 |
ZDI-CAN-10694 |
VMware |
CVE-2020-3967 |
7.5 |
2020-06-30 |
2021-03-02 |
VMware Workstation EHCI Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-783 |
ZDI-CAN-10608 |
VMware |
CVE-2020-3966 |
7.5 |
2020-06-30 |
2021-03-02 |
VMware Workstation EHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-782 |
ZDI-CAN-10478 |
VMware |
CVE-2020-3970 |
2.8 |
2020-06-30 |
|
VMware Workstation Shader Bytecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-781 |
ZDI-CAN-10097 |
VMware |
CVE-2020-3968 |
8.2 |
2020-06-30 |
2021-03-02 |
VMware Workstation xHCI Isoch TD Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-780 |
ZDI-CAN-10297 |
ICONICS |
CVE-2020-12015 |
9.8 |
2020-06-30 |
|
(Pwn2Own) ICONICS Genesis64 IcoFwxServer Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-779 |
ZDI-CAN-10288 |
ICONICS |
CVE-2020-12013 |
9.8 |
2020-06-30 |
|
ICONICS Genesis64 TestQuery SQL Injection Remote Code Execution Vulnerability |
ZDI-20-778 |
ZDI-CAN-10274 |
ICONICS |
CVE-2020-12011 |
9.8 |
2020-06-30 |
|
(Pwn2Own) ICONICS Genesis64 VariantClear Out-Of-Bounds Access Remote Code Execution Vulnerability |
ZDI-20-777 |
ZDI-CAN-10272 |
ICONICS |
CVE-2020-12009 |
7.8 |
2020-06-30 |
|
(Pwn2Own) ICONICS Genesis64 PKGX WbPackAndGoSettings Absolute Path Traversal Remote Code Execution Vulnerability |
ZDI-20-776 |
ZDI-CAN-10267 |
ICONICS |
CVE-2020-12007 |
5.3 |
2020-06-30 |
|
(Pwn2Own) ICONICS Genesis64 fwxserver Deserialization Denial-Of-Service Vulnerability |
ZDI-20-775 |
ZDI-CAN-9710 |
CentOS Web Panel |
CVE-2020-15628 |
7.5 |
2020-06-26 |
|
(0Day) CentOS Web Panel ajax_mail_autoreply user SQL Injection Information Disclosure Vulnerability |
ZDI-20-774 |
ZDI-CAN-9738 |
CentOS Web Panel |
CVE-2020-15627 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mail_autoreply account SQL Injection Information Disclosure Vulnerability |
ZDI-20-773 |
ZDI-CAN-9730 |
CentOS Web Panel |
CVE-2020-15626 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_dashboard term SQL Injection Information Disclosure Vulnerability |
ZDI-20-772 |
ZDI-CAN-9729 |
CentOS Web Panel |
CVE-2020-15625 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_add_mailbox username SQL Injection Information Disclosure Vulnerability |
ZDI-20-771 |
ZDI-CAN-9727 |
CentOS Web Panel |
CVE-2020-15624 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_new_account domain SQL Injection Information Disclosure Vulnerability |
ZDI-20-770 |
ZDI-CAN-9722 |
CentOS Web Panel |
CVE-2020-15623 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security archivo Arbitrary File Write Remote Code Execution Vulnerability |
ZDI-20-769 |
ZDI-CAN-9712 |
CentOS Web Panel |
CVE-2020-15622 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mail_autoreply search SQL Injection Information Disclosure Vulnerability |
ZDI-20-768 |
ZDI-CAN-9711 |
CentOS Web Panel |
CVE-2020-15621 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mail_autoreply email SQL Injection Information Disclosure Vulnerability |
ZDI-20-767 |
ZDI-CAN-9741 |
CentOS Web Panel |
CVE-2020-15620 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts id SQL Injection Information Disclosure Vulnerability |
ZDI-20-766 |
ZDI-CAN-9723 |
CentOS Web Panel |
CVE-2020-15619 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts type SQL Injection Information Disclosure Vulnerability |
ZDI-20-765 |
ZDI-CAN-9717 |
CentOS Web Panel |
CVE-2020-15618 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts username SQL Injection Information Disclosure Vulnerability |
ZDI-20-764 |
ZDI-CAN-9708 |
CentOS Web Panel |
CVE-2020-15617 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts status SQL Injection Information Disclosure Vulnerability |
ZDI-20-763 |
ZDI-CAN-9706 |
CentOS Web Panel |
CVE-2020-15616 |
7.5 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts package SQL Injection Information Disclosure Vulnerability |
ZDI-20-762 |
ZDI-CAN-9746 |
CentOS Web Panel |
CVE-2020-15615 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_ftp_manager Command Injection Remote Code Execution Vulnerability |
ZDI-20-761 |
ZDI-CAN-9718 |
CentOS Web Panel |
CVE-2020-15614 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_php_pecl cha Command Injection Remote Code Execution Vulnerability |
ZDI-20-760 |
ZDI-CAN-9739 |
CentOS Web Panel |
CVE-2020-15613 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_admin_apis line Command Injection Remote Code Execution Vulnerability |
ZDI-20-759 |
ZDI-CAN-9737 |
CentOS Web Panel |
CVE-2020-15612 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_ftp_manager userLogin Command Injection Remote Code Execution Vulnerability |
ZDI-20-758 |
ZDI-CAN-9734 |
CentOS Web Panel |
CVE-2020-15611 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_dashboard service_restart Command Injection Remote Code Execution Vulnerability |
ZDI-20-757 |
ZDI-CAN-9728 |
CentOS Web Panel |
CVE-2020-15610 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_php_pecl modulo Command Injection Remote Code Execution Vulnerability |
ZDI-20-756 |
ZDI-CAN-9726 |
CentOS Web Panel |
CVE-2020-15609 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_dashboard service_stop Command Injection Remote Code Execution Vulnerability |
ZDI-20-755 |
ZDI-CAN-9724 |
CentOS Web Panel |
CVE-2020-15608 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_dashboard ai_service Command Injection Remote Code Execution Vulnerability |
ZDI-20-754 |
ZDI-CAN-9721 |
CentOS Web Panel |
CVE-2020-15607 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_admin_apis line Command Injection Remote Code Execution Vulnerability |
ZDI-20-753 |
ZDI-CAN-9720 |
CentOS Web Panel |
CVE-2020-15606 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_admin_apis Command Injection Remote Code Execution Vulnerability |
ZDI-20-752 |
ZDI-CAN-9719 |
CentOS Web Panel |
CVE-2020-15435 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_dashboard service_start Command Injection Remote Code Execution Vulnerability |
ZDI-20-751 |
ZDI-CAN-9745 |
CentOS Web Panel |
CVE-2020-15434 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_php_pecl canal Command Injection Remote Code Execution Vulnerability |
ZDI-20-750 |
ZDI-CAN-9715 |
CentOS Web Panel |
CVE-2020-15433 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_php_pecl phpversion Command Injection Remote Code Execution Vulnerability |
ZDI-20-749 |
ZDI-CAN-9743 |
CentOS Web Panel |
CVE-2020-15432 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_migration_cpanel filespace Command Injection Remote Code Execution Vulnerability |
ZDI-20-748 |
ZDI-CAN-9740 |
CentOS Web Panel |
CVE-2020-15431 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_crons user Command Injection Remote Code Execution Vulnerability |
ZDI-20-747 |
ZDI-CAN-9736 |
CentOS Web Panel |
CVE-2020-15430 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_list_accounts username Command Injection Remote Code Execution Vulnerability |
ZDI-20-746 |
ZDI-CAN-9716 |
CentOS Web Panel |
CVE-2020-15429 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_crons user Command Injection Remote Code Execution Vulnerability |
ZDI-20-745 |
ZDI-CAN-9714 |
CentOS Web Panel |
CVE-2020-15428 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_crons line Command Injection Remote Code Execution Vulnerability |
ZDI-20-744 |
ZDI-CAN-9713 |
CentOS Web Panel |
CVE-2020-15427 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_disk_usage folderName Command Injection Remote Code Execution Vulnerability |
ZDI-20-743 |
ZDI-CAN-9709 |
CentOS Web Panel |
CVE-2020-15426 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_migration_cpanel serverip Command Injection Remote Code Execution Vulnerability |
ZDI-20-742 |
ZDI-CAN-9742 |
CentOS Web Panel |
CVE-2020-15425 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security Command Injection Remote Code Execution Vulnerability |
ZDI-20-741 |
ZDI-CAN-9735 |
CentOS Web Panel |
CVE-2020-15424 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security domain Command Injection Remote Code Execution Vulnerability |
ZDI-20-740 |
ZDI-CAN-9732 |
CentOS Web Panel |
CVE-2020-15423 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security dominio Command Injection Remote Code Execution Vulnerability |
ZDI-20-739 |
ZDI-CAN-9731 |
CentOS Web Panel |
CVE-2020-15422 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security archivo Command Injection Remote Code Execution Vulnerability |
ZDI-20-738 |
ZDI-CAN-9707 |
CentOS Web Panel |
CVE-2020-15421 |
9.8 |
2020-06-25 |
|
(0Day) CentOS Web Panel ajax_mod_security check_ip Command Injection Remote Code Execution Vulnerability |
ZDI-20-737 |
ZDI-CAN-9259 |
CentOS Web Panel |
CVE-2020-15420 |
9.8 |
2020-06-25 |
2020-07-10 |
(0Day) CentOS Web Panel loader_ajax line Command Injection Remote Code Execution Vulnerability |
ZDI-20-736 |
ZDI-CAN-9607 |
NEC |
CVE-2020-27859 |
7.5 |
2020-06-25 |
2020-12-04 |
(0Day) NEC ESMPRO Manager GetEuaLogDownloadAction Directory Traversal Information Disclosure Vulnerability |
ZDI-20-735 |
ZDI-CAN-10299 |
Rockwell Automation |
CVE-2020-12033 |
9.8 |
2020-06-22 |
|
(Pwn2Own) Rockwell Automation FactoryTalk View SE AddAgent Missing Authentication for Critical Function Remote Code Execution Vulnerability |
ZDI-20-734 |
ZDI-CAN-10298 |
Rockwell Automation |
|
9.8 |
2020-06-22 |
|
(Pwn2Own) Rockwell Automation FactoryTalk View SE RegisterEDSFiles Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-733 |
ZDI-CAN-10292 |
Rockwell Automation |
CVE-2020-12001 |
9.8 |
2020-06-22 |
2020-06-23 |
(Pwn2Own) Rockwell Automation FactoryTalk Linx CopyRenameProject Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-732 |
ZDI-CAN-10291 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
|
(Pwn2Own) Rockwell Automation Studio 5000 Version Missing Authentication for Critical Function Information Disclosure Vulnerability |
ZDI-20-731 |
ZDI-CAN-10270 |
Rockwell Automation |
CVE-2020-12031 |
7.8 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE Project File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability |
ZDI-20-730 |
ZDI-CAN-10284 |
Rockwell Automation |
CVE-2020-12029 |
9.8 |
2020-06-22 |
|
(Pwn2Own) Rockwell Automation FactoryTalk View SE Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-729 |
ZDI-CAN-10283 |
Rockwell Automation |
CVE-2020-12028 |
7.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE Backup Missing Authentication for Critical Function Vulnerability |
ZDI-20-728 |
ZDI-CAN-10282 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE GetHMIProjectPaths Missing Authentication for Critical Function Information Disclosure Vulnerability |
ZDI-20-727 |
ZDI-CAN-10281 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE GetHMIProjects Missing Authentication for Critical Function Information Disclosure Vulnerability |
ZDI-20-726 |
ZDI-CAN-10877 |
Adobe |
CVE-2020-9662 |
7.8 |
2020-06-18 |
|
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-725 |
ZDI-CAN-10878 |
Adobe |
CVE-2020-9660 |
7.8 |
2020-06-18 |
|
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-724 |
ZDI-CAN-10876 |
Adobe |
CVE-2020-9661 |
7.8 |
2020-06-18 |
|
Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-723 |
ZDI-CAN-10868 |
Adobe |
CVE-2020-9655 |
7.8 |
2020-06-18 |
|
Adobe Premiere Rush 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-722 |
ZDI-CAN-10869 |
Adobe |
CVE-2020-9656 |
7.8 |
2020-06-18 |
|
Adobe Premiere Rush MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-721 |
ZDI-CAN-10870 |
Adobe |
CVE-2020-9657 |
7.8 |
2020-06-18 |
|
Adobe Premiere Rush MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-720 |
ZDI-CAN-10854 |
Adobe |
CVE-2020-9659 |
7.8 |
2020-06-18 |
|
Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-719 |
ZDI-CAN-10853 |
Adobe |
CVE-2020-9658 |
7.8 |
2020-06-18 |
|
Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-718 |
ZDI-CAN-10864 |
Adobe |
CVE-2020-9652 |
7.8 |
2020-06-18 |
|
Adobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-717 |
ZDI-CAN-10865 |
Adobe |
CVE-2020-9653 |
7.8 |
2020-06-18 |
|
Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-716 |
ZDI-CAN-10866 |
Adobe |
CVE-2020-9654 |
7.8 |
2020-06-18 |
|
Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-715 |
ZDI-CAN-10074 |
Docker |
|
7.8 |
2020-06-15 |
|
Docker Desktop Execution with Unnecessary Privileges Privilege Escalation Vulnerability |
ZDI-20-714 |
ZDI-CAN-10277 |
Inductive Automation |
|
5.3 |
2020-06-15 |
|
(0Day) (Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization of Untrusted Data Information Disclosure Vulnerability |
ZDI-20-713 |
ZDI-CAN-9756 |
NETGEAR |
|
6.3 |
2020-06-15 |
|
(0Day) NETGEAR R6700 httpd strtblupgrade Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-712 |
ZDI-CAN-9703 |
NETGEAR |
|
8.8 |
2020-06-15 |
|
(0Day) NETGEAR R6700 httpd Firmware Upload Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-711 |
ZDI-CAN-9618 |
NETGEAR |
|
6.5 |
2020-06-15 |
|
(0Day) NETGEAR R6700 httpd Improper Access Control Information Disclosure Vulnerability |
ZDI-20-710 |
ZDI-CAN-9751 |
IBM |
CVE-2020-4216 |
7.3 |
2020-06-15 |
|
IBM Spectrum Protect Plus Hardcoded Username And Password Authentication Bypass Vulnerability |
ZDI-20-709 |
ZDI-CAN-9768 |
NETGEAR |
|
8.8 |
2020-06-15 |
|
(0Day) NETGEAR R6700 httpd strtblupgrade Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-708 |
ZDI-CAN-9767 |
NETGEAR |
|
8.4 |
2020-06-15 |
|
(0Day) NETGEAR R6700 httpd strtblupgrade Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-707 |
ZDI-CAN-9649 |
NETGEAR |
|
7.5 |
2020-06-15 |
|
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Use of a Broken or Risky Cryptographic Algorithm Remote Code Execution Vulnerability |
ZDI-20-706 |
ZDI-CAN-9648 |
NETGEAR |
|
7.5 |
2020-06-15 |
|
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Download of Code Without Integrity Check Remote Code Execution Vulnerability |
ZDI-20-705 |
ZDI-CAN-9647 |
NETGEAR |
|
7.5 |
2020-06-15 |
|
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Improper Certificate Validation Remote Code Execution Vulnerability |
ZDI-20-704 |
ZDI-CAN-9643 |
NETGEAR |
CVE-2020-10924 |
8.8 |
2020-06-15 |
|
(0Day) (Pwn2Own) NETGEAR R6700 UPnP NewBlockSiteName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-703 |
ZDI-CAN-9642 |
NETGEAR |
|
6.5 |
2020-06-15 |
|
(0Day) (Pwn2Own) NETGEAR R6700 UPnP SOAPAction Authentication Bypass Vulnerability |
ZDI-20-702 |
ZDI-CAN-10005 |
McAfee |
CVE-2020-7280 |
7.8 |
2020-06-15 |
|
McAfee VirusScan Enterprise Junction Privilege Escalation Vulnerability |
ZDI-20-701 |
ZDI-CAN-10776 |
Apple |
|
5.3 |
2020-06-09 |
2021-06-29 |
(0Day) (Pwn2Own) Apple macOS Quarantine Attribute Bypass Vulnerability |
ZDI-20-700 |
ZDI-CAN-10592 |
Adobe |
CVE-2020-9634 |
7.8 |
2020-06-09 |
|
Adobe FrameMaker GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-699 |
ZDI-CAN-10576 |
Adobe |
CVE-2020-9635 |
7.8 |
2020-06-09 |
|
Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-698 |
ZDI-CAN-10788 |
Microsoft |
CVE-2020-1219 |
7.5 |
2020-06-09 |
|
Microsoft Chakra Intl Object Type Confusion Remote Code Execution Vulnerability |
ZDI-20-697 |
ZDI-CAN-10681 |
Microsoft |
CVE-2020-1239 |
8.8 |
2020-06-09 |
|
Microsoft Windows Media Player mpg2splt Integer Underflow Remote Code Execution Vulnerability |
ZDI-20-696 |
ZDI-CAN-10693 |
Microsoft |
CVE-2020-1238 |
8.8 |
2020-06-09 |
|
Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-695 |
ZDI-CAN-10654 |
Microsoft |
CVE-2020-1238 |
8.8 |
2020-06-09 |
|
Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-694 |
ZDI-CAN-10589 |
Microsoft |
CVE-2020-1181 |
8.8 |
2020-06-09 |
|
Microsoft SharePoint Server Web Part Remote Code Execution Vulnerability |
ZDI-20-693 |
ZDI-CAN-10512 |
Microsoft |
CVE-2020-1232 |
4.3 |
2020-06-09 |
|
Microsoft Windows Media Player DTS Stream Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-692 |
ZDI-CAN-10033 |
Microsoft |
CVE-2020-1207 |
8.8 |
2020-06-09 |
|
Microsoft Windows win32kfull PDEVOBJ Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-691 |
ZDI-CAN-11127 |
ManageEngine |
CVE-2020-13818 |
7.5 |
2020-06-09 |
|
ManageEngine OpManager OpmSkipFilter Directory Traversal Information Disclosure Vulnerability |
ZDI-20-690 |
ZDI-CAN-10756 |
IBM |
CVE-2020-4449 |
7.5 |
2020-06-05 |
|
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Information Disclosure Vulnerability |
ZDI-20-689 |
ZDI-CAN-10749 |
IBM |
CVE-2020-4450 |
9.8 |
2020-06-05 |
|
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-688 |
ZDI-CAN-10732 |
IBM |
CVE-2020-4448 |
9.8 |
2020-06-05 |
2020-09-21 |
IBM WebSphere UploadFileArgument Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-687 |
ZDI-CAN-10278 |
Inductive Automation |
CVE-2020-12000 |
9.8 |
2020-06-01 |
|
(Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-686 |
ZDI-CAN-10276 |
Inductive Automation |
CVE-2020-10644 |
9.8 |
2020-06-01 |
2021-06-29 |
(Pwn2Own) Inductive Automation Ignition getDiffs Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-685 |
ZDI-CAN-10275 |
Inductive Automation |
CVE-2020-12004 |
5.3 |
2020-06-01 |
2021-06-29 |
(Pwn2Own) Inductive Automation Ignition getDiffs Missing Authentication for Critical Function Information Disclosure Vulnerability |
ZDI-20-684 |
ZDI-CAN-10007 |
NEC |
CVE-2020-10917 |
9.8 |
2020-06-01 |
|
NEC ESMPRO Manager RMI Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-683 |
ZDI-CAN-10077 |
Apple |
CVE-2020-9841 |
5.3 |
2020-05-28 |
|
Apple macOS SkyLight Integer Overflow Privilege Escalation Vulnerability |
ZDI-20-682 |
ZDI-CAN-10504 |
Apple |
CVE-2020-9800 |
8.8 |
2020-05-28 |
|
Apple Safari HasIndexedProperty Type Confusion Remote Code Execution Vulnerability |
ZDI-20-681 |
ZDI-CAN-10777 |
Apple |
CVE-2020-9839 |
7.8 |
2020-05-28 |
|
(Pwn2Own) Apple macOS cfprefsd Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-680 |
ZDI-CAN-10775 |
Apple |
CVE-2020-9856 |
5.3 |
2020-05-28 |
|
(Pwn2Own) Apple macOS Core Virtual Machine Service Heap-based Buffer Overflow Vulnerability |
ZDI-20-679 |
ZDI-CAN-10774 |
Apple |
CVE-2020-9801 |
5.3 |
2020-05-28 |
|
(Pwn2Own) Apple Safari Symbolic Link Arbitrary Application Execution Vulnerability |
ZDI-20-678 |
ZDI-CAN-10329 |
Trend Micro |
CVE-2020-8604 |
7.5 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Apache Solr Directory Traversal Information Disclosure Vulnerability |
ZDI-20-677 |
ZDI-CAN-10117 |
Trend Micro |
CVE-2020-8606 |
9.8 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Apache Solr Authentication Bypass Vulnerability |
ZDI-20-676 |
ZDI-CAN-10095 |
Trend Micro |
CVE-2020-8605 |
8.8 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Command Injection Remote Code Execution Vulnerability |
ZDI-20-675 |
ZDI-CAN-10088 |
Trend Micro |
CVE-2020-8603 |
6.3 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability |
ZDI-20-674 |
ZDI-CAN-10652 |
Apple |
CVE-2020-9815 |
7.8 |
2020-05-27 |
|
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-673 |
ZDI-CAN-10651 |
Apple |
CVE-2020-9816 |
7.8 |
2020-05-27 |
|
Apple macOS libFontParser Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-672 |
ZDI-CAN-10773 |
Apple |
CVE-2020-9850 |
7.3 |
2020-05-27 |
|
(Pwn2Own) Apple Safari In Operator JIT Type Confusion Remote Code Execution Vulnerability |
ZDI-20-671 |
ZDI-CAN-10581 |
Apple |
CVE-2020-9791 |
3.3 |
2020-05-27 |
|
Apple macOS AudioToolboxCore AIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-670 |
ZDI-CAN-10871 |
Adobe |
CVE-2020-9617 |
3.3 |
2020-05-25 |
|
Adobe Premiere Rush MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-669 |
ZDI-CAN-10867 |
Adobe |
CVE-2020-9616 |
3.3 |
2020-05-25 |
|
Adobe Premiere Pro MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-668 |
ZDI-CAN-10879 |
Adobe |
CVE-2020-9586 |
7.8 |
2020-05-25 |
|
Adobe Character Animator EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-667 |
ZDI-CAN-10855 |
Adobe |
CVE-2020-9618 |
3.3 |
2020-05-25 |
|
Adobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-666 |
ZDI-CAN-10037 |
Microsoft |
|
7.0 |
2020-05-19 |
2020-07-20 |
(0Day) Microsoft Windows WLAN Connection Profile Missing Authentication Privilege Escalation Vulnerability |
ZDI-20-665 |
ZDI-CAN-10016 |
Microsoft |
CVE-2020-0916 |
7.0 |
2020-05-19 |
|
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
ZDI-20-664 |
ZDI-CAN-10012 |
Microsoft |
CVE-2020-0915 |
2.5 |
2020-05-19 |
|
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Information Disclosure Vulnerability |
ZDI-20-663 |
ZDI-CAN-9851 |
Microsoft |
CVE-2020-0986 |
7.0 |
2020-05-19 |
|
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
ZDI-20-662 |
ZDI-CAN-10014 |
Microsoft |
CVE-2020-0915 |
7.0 |
2020-05-19 |
|
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
ZDI-20-661 |
ZDI-CAN-10850 |
FreeBSD |
CVE-2020-7455 |
4.1 |
2020-05-19 |
|
FreeBSD Kernel NAT Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-660 |
ZDI-CAN-10849 |
FreeBSD |
CVE-2020-7454 |
9.8 |
2020-05-19 |
|
FreeBSD Kernel NAT Out-Of-Bounds Access Remote Code Execution Vulnerability |
ZDI-20-659 |
ZDI-CAN-10624 |
FreeBSD |
CVE-2020-7454 |
9.8 |
2020-05-19 |
|
FreeBSD Kernel NAT Out-Of-Bounds Access Remote Code Execution Vulnerability |
ZDI-20-658 |
ZDI-CAN-10287 |
Schneider Electric |
CVE-2020-7493 |
7.8 |
2020-05-14 |
2021-06-29 |
Schneider Electric EcoStruxure Operator Terminal Expert VXDZ File Parsing Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-657 |
ZDI-CAN-10280 |
Schneider Electric |
CVE-2020-7495 |
7.8 |
2020-05-14 |
|
(Pwn2Own) Schneider Electric EcoStructure Operator Terminal Expert ZIP Path Traversal Remote Code Execution Vulnerability |
ZDI-20-656 |
ZDI-CAN-10279 |
Schneider Electric |
CVE-2020-7494 |
7.8 |
2020-05-14 |
|
(Pwn2Own) Schneider Electric EcoStructure Operator Terminal Expert VXDZ Arbitrary Library Load Remote Code Execution Vulnerability |
ZDI-20-655 |
ZDI-CAN-10017 |
Advantech |
CVE-2020-12019 |
7.8 |
2020-05-14 |
|
(0Day) Advantech WebAccess Node Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-654 |
ZDI-CAN-9779 |
Advantech |
CVE-2020-12019 |
9.8 |
2020-05-14 |
|
(0Day) Advantech WebAccess Node DATACORE Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-653 |
ZDI-CAN-10822 |
Adobe |
CVE-2020-9612 |
7.0 |
2020-05-12 |
|
Adobe Acrobat Reader DC JPEG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-652 |
ZDI-CAN-10106 |
Adobe |
CVE-2020-9597 |
7.8 |
2020-05-12 |
|
Adobe Acrobat Reader DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-651 |
ZDI-CAN-10784 |
Adobe |
CVE-2020-9606 |
7.3 |
2020-05-12 |
2020-08-18 |
(Pwn2Own) Adobe Acrobat Reader DC Field Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-650 |
ZDI-CAN-11085 |
Eaton |
CVE-2020-6652 |
7.8 |
2020-05-12 |
2020-05-12 |
Eaton Intelligent Power Manager mc2 Incorrect Privilege Assignment Privilege Escalation Vulnerability |
ZDI-20-649 |
ZDI-CAN-9854 |
Eaton |
CVE-2020-6651 |
8.8 |
2020-05-12 |
|
Eaton Intelligent Power Manager mc2 Command Injection Remote Code Execution Vulnerability |
ZDI-20-648 |
ZDI-CAN-10124 |
Microsoft |
CVE-2020-1102 |
8.8 |
2020-05-12 |
|
Microsoft SharePoint Shared Forms Incomplete Blacklist Remote Code Execution Vulnerability |
ZDI-20-647 |
ZDI-CAN-10743 |
Microsoft |
CVE-2020-0987 |
4.3 |
2020-05-12 |
|
Microsoft Windows EMF EMR_SETDIBITSTODEVICE Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-646 |
ZDI-CAN-10785 |
Microsoft |
CVE-2020-1135 |
8.8 |
2020-05-12 |
|
(Pwn2Own) Microsoft Windows DirectComposition SetReferenceArrayProperty Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-645 |
ZDI-CAN-10397 |
Microsoft |
CVE-2020-1062 |
8.8 |
2020-05-12 |
|
Microsoft Internet Explorer JScript Garbage Collection Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-644 |
ZDI-CAN-10566 |
Microsoft |
CVE-2020-1126 |
8.8 |
2020-05-12 |
|
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-643 |
ZDI-CAN-10569 |
Microsoft |
CVE-2020-1126 |
8.8 |
2020-05-12 |
|
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-642 |
ZDI-CAN-10516 |
Microsoft |
CVE-2020-1028 |
8.8 |
2020-05-12 |
|
Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-641 |
ZDI-CAN-10381 |
Microsoft |
CVE-2020-1096 |
9.6 |
2020-05-12 |
|
Microsoft Windows PDF Library DirectWrite Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-640 |
ZDI-CAN-10039 |
Microsoft |
CVE-2020-1051 |
7.8 |
2020-05-12 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-639 |
ZDI-CAN-10103 |
Microsoft |
CVE-2020-1150 |
7.5 |
2020-05-12 |
|
Microsoft Internet Explorer CWMPErrorDlg Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-638 |
ZDI-CAN-10064 |
Microsoft |
CVE-2020-1176 |
7.8 |
2020-05-12 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-637 |
ZDI-CAN-10056 |
Microsoft |
CVE-2020-1174 |
7.8 |
2020-05-12 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-636 |
ZDI-CAN-10060 |
Microsoft |
CVE-2020-1175 |
7.8 |
2020-05-12 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-635 |
ZDI-CAN-10026 |
Advantech |
CVE-2020-10638 |
8.1 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwBacNetJ Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-634 |
ZDI-CAN-10080 |
Advantech |
CVE-2020-12002 |
8.1 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwBacNetJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-633 |
ZDI-CAN-10079 |
Advantech |
CVE-2020-12002 |
8.1 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwBacNetJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-632 |
ZDI-CAN-10325 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess IOCTL 0x2711 bwscrp Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-631 |
ZDI-CAN-9892 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c80 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-630 |
ZDI-CAN-9896 |
Advantech |
CVE-2020-12018 |
7.5 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-629 |
ZDI-CAN-9940 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x5217 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-628 |
ZDI-CAN-9903 |
Advantech |
CVE-2020-12018 |
7.5 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-627 |
ZDI-CAN-9899 |
Advantech |
CVE-2020-12026 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x0000277d Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-626 |
ZDI-CAN-9907 |
Advantech |
CVE-2020-12026 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x0000277d Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-625 |
ZDI-CAN-10339 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA SyntecUA Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-624 |
ZDI-CAN-10338 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA OPCUA Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-623 |
ZDI-CAN-10337 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ModDuDrv Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-622 |
ZDI-CAN-10086 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA GpsET200 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-621 |
ZDI-CAN-10085 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwTCPIP Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-620 |
ZDI-CAN-10081 |
Advantech |
CVE-2020-10638 |
8.1 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwTCPIP Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-619 |
ZDI-CAN-10025 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BacNetDrvJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-618 |
ZDI-CAN-9891 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c84 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-617 |
ZDI-CAN-9890 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c7b Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-616 |
ZDI-CAN-9889 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c77 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-615 |
ZDI-CAN-9884 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c76 IOCTL 0x00013c77 SQL Injection Information Disclosure Vulnerability |
ZDI-20-614 |
ZDI-CAN-9883 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c74 IOCTL 0x00013c75 SQL Injection Information Disclosure Vulnerability |
ZDI-20-613 |
ZDI-CAN-9882 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
|
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c71 SQL Injection Information Disclosure Vulnerability |
ZDI-20-612 |
ZDI-CAN-9948 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x5218 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-611 |
ZDI-CAN-9947 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x521B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-610 |
ZDI-CAN-9941 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x520B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-609 |
ZDI-CAN-9939 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x5213 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-608 |
ZDI-CAN-9938 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x5208 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-607 |
ZDI-CAN-9936 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x5209 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-606 |
ZDI-CAN-9935 |
Advantech |
|
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x520B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-605 |
ZDI-CAN-9901 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002711 Command Injection Remote Code Execution Vulnerability |
ZDI-20-604 |
ZDI-CAN-9898 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002774 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-603 |
ZDI-CAN-9897 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002723 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-602 |
ZDI-CAN-9895 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002775 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-601 |
ZDI-CAN-9998 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791d Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-600 |
ZDI-CAN-9997 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-599 |
ZDI-CAN-9994 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791c Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-598 |
ZDI-CAN-9988 |
Advantech |
CVE-2020-12022 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000521e Improper Validation of Array Index Remote Code Execution Vulnerability |
ZDI-20-597 |
ZDI-CAN-9985 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005226 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-596 |
ZDI-CAN-9908 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002775 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-595 |
ZDI-CAN-9905 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002711 Command Injection Remote Code Execution Vulnerability |
ZDI-20-594 |
ZDI-CAN-9904 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002774 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-593 |
ZDI-CAN-9902 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002723 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-592 |
ZDI-CAN-9906 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005227 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-591 |
ZDI-CAN-9996 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-590 |
ZDI-CAN-9987 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005241 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-589 |
ZDI-CAN-9995 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
|
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-588 |
ZDI-CAN-10377 |
Schneider Electric |
CVE-2020-10626 |
7.8 |
2020-05-06 |
|
Schneider Electric EcoStruxure IT Gateway Improper Access Control Privilege Escalation Vulnerability |
ZDI-20-587 |
ZDI-CAN-9859 |
Apple |
CVE-2020-3915 |
7.8 |
2020-05-06 |
|
Apple macOS printtool Daemon Improper Input Validation Privilege Escalation Vulnerability |
ZDI-20-586 |
ZDI-CAN-9973 |
Trading Technologies |
|
9.8 |
2020-05-06 |
|
Trading Technologies X_TRADER remove_park Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-585 |
ZDI-CAN-9972 |
Trading Technologies |
|
9.8 |
2020-05-06 |
|
Trading Technologies X_TRADER disconnect_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-584 |
ZDI-CAN-9971 |
Trading Technologies |
|
9.8 |
2020-05-06 |
|
Trading Technologies X_TRADER block_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-583 |
ZDI-CAN-9970 |
Trading Technologies |
|
9.8 |
2020-05-06 |
|
Trading Technologies X_TRADER unblock_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-582 |
ZDI-CAN-10783 |
Oracle |
CVE-2020-2575 |
7.8 |
2020-04-30 |
|
(Pwn2Own) Oracle VirtualBox OHCI Uninitialized Variable Privilege Escalation Vulnerability |
ZDI-20-581 |
ZDI-CAN-10782 |
Oracle |
CVE-2020-2894 |
5.5 |
2020-04-30 |
|
(Pwn2Own) Oracle VirtualBox E1000 IP Checksum Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-580 |
ZDI-CAN-10035 |
Adobe |
CVE-2020-9568 |
7.8 |
2020-04-30 |
|
Adobe Bridge DCM File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-579 |
ZDI-CAN-10090 |
Adobe |
CVE-2020-3765 |
7.8 |
2020-04-30 |
2020-07-20 |
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-578 |
ZDI-CAN-10402 |
Microsoft |
CVE-2020-0744 |
3.3 |
2020-04-30 |
|
Microsoft Windows user32 DIB Scaling Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-577 |
ZDI-CAN-10321 |
LAquis |
CVE-2020-10622 |
5.5 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability |
ZDI-20-576 |
ZDI-CAN-10320 |
LAquis |
CVE-2020-10622 |
5.5 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability |
ZDI-20-575 |
ZDI-CAN-10319 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
ZDI-20-574 |
ZDI-CAN-10316 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
ZDI-20-573 |
ZDI-CAN-10197 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
ZDI-20-572 |
ZDI-CAN-10318 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
ZDI-20-571 |
ZDI-CAN-10317 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
|
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
ZDI-20-570 |
ZDI-CAN-10492 |
Oracle |
CVE-2020-2883 |
9.8 |
2020-04-30 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-569 |
ZDI-CAN-10018 |
Adobe |
CVE-2020-9553 |
3.3 |
2020-04-30 |
|
Adobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-568 |
ZDI-CAN-10048 |
Adobe |
CVE-2020-9565 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-567 |
ZDI-CAN-10066 |
Adobe |
CVE-2020-9567 |
3.3 |
2020-04-28 |
|
Adobe Bridge TTF File Parsing Use-After-Free Information Disclosure Vulnerability |
ZDI-20-566 |
ZDI-CAN-10067 |
Adobe |
CVE-2020-9554 |
7.8 |
2020-04-28 |
|
Adobe Bridge GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-565 |
ZDI-CAN-10052 |
Adobe |
CVE-2020-9555 |
7.8 |
2020-04-28 |
2021-03-02 |
Adobe Bridge EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-564 |
ZDI-CAN-10049 |
Adobe |
CVE-2020-9556 |
7.8 |
2020-04-28 |
2021-03-02 |
Adobe Bridge PostScript put Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-563 |
ZDI-CAN-10040 |
Adobe |
CVE-2020-9557 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript blend Command Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-562 |
ZDI-CAN-10041 |
Adobe |
CVE-2020-9558 |
3.3 |
2020-04-28 |
|
Adobe Bridge PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-561 |
ZDI-CAN-10042 |
Adobe |
CVE-2020-9560 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript drop Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-560 |
ZDI-CAN-10043 |
Adobe |
CVE-2020-9559 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript load Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-559 |
ZDI-CAN-10044 |
Adobe |
CVE-2020-9561 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-558 |
ZDI-CAN-10045 |
Adobe |
CVE-2020-9562 |
7.8 |
2020-04-28 |
|
Adobe Bridge PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-557 |
ZDI-CAN-10046 |
Adobe |
CVE-2020-9563 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript CharString Directory Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-556 |
ZDI-CAN-10047 |
Adobe |
CVE-2020-9564 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript hsbw Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-555 |
ZDI-CAN-10109 |
Adobe |
CVE-2020-9569 |
7.8 |
2020-04-28 |
|
Adobe Bridge TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-554 |
ZDI-CAN-10094 |
Adobe |
CVE-2020-9566 |
7.8 |
2020-04-28 |
|
Adobe Bridge PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-553 |
ZDI-CAN-10003 |
TP-Link |
CVE-2020-10916 |
8.0 |
2020-04-28 |
|
TP-Link TL-WA855RE login.json Improper Authentication Privilege Escalation Vulnerability |
ZDI-20-552 |
ZDI-CAN-10378 |
Microsoft |
CVE-2020-0744 |
3.3 |
2020-04-23 |
|
Microsoft Windows gdi32full StretchDIBitsImpl Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-551 |
ZDI-CAN-10410 |
Oracle |
CVE-2020-2911 |
7.5 |
2020-04-20 |
|
Oracle VirtualBox vmsvga3dSetLightData Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-550 |
ZDI-CAN-10096 |
Oracle |
CVE-2020-2701 |
7.5 |
2020-04-20 |
2021-03-02 |
Oracle VirtualBox xHCI Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-549 |
ZDI-CAN-10301 |
Triangle MicroWorks |
CVE-2020-10611 |
9.8 |
2020-04-16 |
|
(Pwn2Own) Triangle MicroWorks SCADA Data Gateway DNP3 Type Confusion Remote Code Execution Vulnerability |
ZDI-20-548 |
ZDI-CAN-10300 |
Triangle MicroWorks |
CVE-2020-10613 |
5.3 |
2020-04-16 |
|
(Pwn2Own) Triangle MicroWorks SCADA Data Gateway DNP3 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-547 |
ZDI-CAN-10266 |
Triangle MicroWorks |
CVE-2020-10615 |
9.8 |
2020-04-16 |
2020-04-16 |
(Pwn2Own) Triangle Microworks SCADA Data Gateway DNP3 GET_FILE_INFO Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-546 |
ZDI-CAN-10401 |
Veeam |
CVE-2020-10915 |
9.8 |
2020-04-16 |
2020-05-14 |
Veeam ONE HandshakeResult Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-545 |
ZDI-CAN-10400 |
Veeam |
CVE-2020-10914 |
9.8 |
2020-04-16 |
2020-05-14 |
Veeam ONE PerformHandshake Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-544 |
ZDI-CAN-9604 |
Cisco |
CVE-2020-3249 |
8.2 |
2020-04-16 |
|
Cisco UCS Director saveWindowsNetworkConfig Directory Traversal Denial-of-Service Vulnerability |
ZDI-20-543 |
ZDI-CAN-9596 |
Cisco |
CVE-2020-3248 |
9.8 |
2020-04-16 |
|
Cisco UCS Director saveStaticConfig Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-542 |
ZDI-CAN-9565 |
Cisco |
CVE-2020-3240 |
9.8 |
2020-04-16 |
|
Cisco UCS Director ScriptModuleAddJarPage Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-541 |
ZDI-CAN-9593 |
Cisco |
CVE-2020-3247 |
9.8 |
2020-04-16 |
|
Cisco UCS Director CopyFileRunnable run Symlink Following Remote Code Execution Vulnerability |
ZDI-20-540 |
ZDI-CAN-9559 |
Cisco |
CVE-2020-3243 |
9.8 |
2020-04-16 |
|
Cisco UCS Director isEnableRestKeyAccessCheckForUser Authentication Bypass Vulnerability |
ZDI-20-539 |
ZDI-CAN-9586 |
Cisco |
CVE-2020-3239 |
9.8 |
2020-04-16 |
|
Cisco UCS Director ApplianceStorageUtil unzip Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-538 |
ZDI-CAN-9557 |
Cisco |
CVE-2020-3250 |
7.5 |
2020-04-16 |
|
Cisco UCS Director downloadFile Directory Traversal Information Disclosure Vulnerability |
ZDI-20-537 |
ZDI-CAN-9644 |
Amazon |
|
8.8 |
2020-04-16 |
|
(Pwn2Own) Amazon Echo Show Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-536 |
ZDI-CAN-10295 |
OPC Foundation |
CVE-2020-8867 |
5.3 |
2020-04-16 |
2021-06-29 |
(Pwn2Own) OPC Foundation UA .NET Standard CreateSessionRequest Race Condition Denial-of-Service Vulnerability |
ZDI-20-535 |
ZDI-CAN-10650 |
Foxit |
CVE-2020-10907 |
7.8 |
2020-04-16 |
|
Foxit Reader XFA Widget Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-534 |
ZDI-CAN-10614 |
Foxit |
CVE-2020-10906 |
7.8 |
2020-04-16 |
|
Foxit Reader resetForm Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-533 |
ZDI-CAN-10568 |
Foxit |
CVE-2020-10905 |
3.3 |
2020-04-16 |
|
Foxit PhantomPDF U3D File Parsing vertex Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-532 |
ZDI-CAN-10464 |
Foxit |
CVE-2020-10904 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-531 |
ZDI-CAN-10463 |
Foxit |
CVE-2020-10903 |
3.3 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-530 |
ZDI-CAN-10462 |
Foxit |
CVE-2020-10902 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-529 |
ZDI-CAN-10461 |
Foxit |
CVE-2020-10901 |
3.3 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-528 |
ZDI-CAN-10142 |
Foxit |
CVE-2020-10900 |
7.8 |
2020-04-16 |
|
Foxit Reader AcroForm Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-527 |
ZDI-CAN-10132 |
Foxit |
CVE-2020-10899 |
7.8 |
2020-04-16 |
|
Foxit Reader XFA Template Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-526 |
ZDI-CAN-10195 |
Foxit |
CVE-2020-10898 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-525 |
ZDI-CAN-10193 |
Foxit |
CVE-2020-10897 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-524 |
ZDI-CAN-10192 |
Foxit |
CVE-2020-10896 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-523 |
ZDI-CAN-10191 |
Foxit |
CVE-2020-10895 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-522 |
ZDI-CAN-10190 |
Foxit |
CVE-2020-10894 |
3.3 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-521 |
ZDI-CAN-10189 |
Foxit |
CVE-2020-10893 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-520 |
ZDI-CAN-9946 |
Foxit |
CVE-2020-10913 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF OCRAndExportToExcel Type Confusion Remote Code Execution Vulnerability |
ZDI-20-519 |
ZDI-CAN-9945 |
Foxit |
CVE-2020-10912 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF SetFieldValue Type Confusion Remote Code Execution Vulnerability |
ZDI-20-518 |
ZDI-CAN-9944 |
Foxit |
CVE-2020-10911 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF GetFieldValue Type Confusion Remote Code Execution Vulnerability |
ZDI-20-517 |
ZDI-CAN-9943 |
Foxit |
CVE-2020-10910 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF RotatePage Type Confusion Remote Code Execution Vulnerability |
ZDI-20-516 |
ZDI-CAN-9942 |
Foxit |
CVE-2020-10909 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF AddWatermark Type Confusion Remote Code Execution Vulnerability |
ZDI-20-515 |
ZDI-CAN-9865 |
Foxit |
CVE-2020-10908 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF Export Type Confusion Remote Code Execution Vulnerability |
ZDI-20-514 |
ZDI-CAN-9831 |
Foxit |
CVE-2020-10891 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF Save Type Confusion Remote Code Execution Vulnerability |
ZDI-20-513 |
ZDI-CAN-9830 |
Foxit |
CVE-2020-10892 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF CombineFiles Arbitrary File Write Remote Code Execution Vulnerability |
ZDI-20-512 |
ZDI-CAN-9829 |
Foxit |
CVE-2020-10890 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF ConvertToPDF Arbitrary File Write Remote Code Execution Vulnerability |
ZDI-20-511 |
ZDI-CAN-9828 |
Foxit |
CVE-2020-10889 |
7.8 |
2020-04-16 |
|
Foxit PhantomPDF DuplicatePages Type Confusion Remote Code Execution Vulnerability |
ZDI-20-510 |
ZDI-CAN-10742 |
Oracle |
CVE-2020-2907 |
7.5 |
2020-04-16 |
|
Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability |
ZDI-20-509 |
ZDI-CAN-10719 |
Oracle |
CVE-2020-2907 |
7.5 |
2020-04-16 |
|
Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability |
ZDI-20-508 |
ZDI-CAN-10416 |
Oracle |
CVE-2020-2929 |
7.8 |
2020-04-16 |
|
Oracle VirtualBox SLiRP Networking Out-Of-Bounds Access Remote Code Execution Vulnerability |
ZDI-20-507 |
ZDI-CAN-10423 |
Oracle |
CVE-2020-2758 |
8.2 |
2020-04-16 |
|
Oracle VirtualBox VBoxVGA VBoxVHWASurfaceBase Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-506 |
ZDI-CAN-10422 |
Oracle |
CVE-2020-2748 |
3.2 |
2020-04-16 |
|
Oracle VirtualBox vmsvgaR3FifoUpdateCursor Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-505 |
ZDI-CAN-9334 |
Oracle |
CVE-2020-2950 |
9.8 |
2020-04-16 |
|
Oracle Business Intelligence AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-504 |
ZDI-CAN-10341 |
Oracle |
CVE-2020-2883 |
9.8 |
2020-04-16 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-503 |
ZDI-CAN-10466 |
Oracle |
CVE-2020-2956 |
8.1 |
2020-04-16 |
|
Oracle E-Business Suite Human Resources Organization Hierarchy Viewer PosServer SQL Injection Privilege Escalation Vulnerability |
ZDI-20-502 |
ZDI-CAN-10465 |
Oracle |
CVE-2020-2882 |
8.1 |
2020-04-16 |
|
Oracle E-Business Suite Human Resources Organization Hierarchy Viewer OrgServer SQL Injection Privilege Escalation Vulnerability |
ZDI-20-501 |
ZDI-CAN-10179 |
Oracle |
CVE-2020-2908 |
7.5 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox Virtual USB Numeric Truncation Privilege Escalation Vulnerability |
ZDI-20-500 |
ZDI-CAN-10023 |
Oracle |
CVE-2020-2743 |
6.0 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox xHCI Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-499 |
ZDI-CAN-10022 |
Oracle |
CVE-2020-2742 |
8.2 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox xHCI Integer Overflow Privilege Escalation Vulnerability |
ZDI-20-498 |
ZDI-CAN-9113 |
Oracle |
CVE-2020-2741 |
6.0 |
2020-04-16 |
|
Oracle VirtualBox shader_glsl_get_register_name Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-497 |
ZDI-CAN-9960 |
Oracle |
CVE-2020-2902 |
8.8 |
2020-04-16 |
|
Oracle VirtualBox D3D9 Shader Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-496 |
ZDI-CAN-9402 |
Intel |
CVE-2020-0557 |
8.8 |
2020-04-15 |
2021-06-29 |
Intel Wi-Fi Link Driver Netwtw06 Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-495 |
ZDI-CAN-9376 |
Intel |
CVE-2020-0558 |
8.8 |
2020-04-15 |
2021-06-29 |
Intel Wi-Fi Link Driver Netwtw06 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-494 |
ZDI-CAN-9277 |
Intel |
CVE-2020-0558 |
8.8 |
2020-04-15 |
|
Intel Wi-Fi Link Driver Netwtw04 Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-493 |
ZDI-CAN-10473 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTextLen Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-492 |
ZDI-CAN-10417 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wDescribeLen Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-491 |
ZDI-CAN-10421 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing Giffile Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-490 |
ZDI-CAN-10411 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing Base64TextLen Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-489 |
ZDI-CAN-10340 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-488 |
ZDI-CAN-10167 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-487 |
ZDI-CAN-10166 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-486 |
ZDI-CAN-10165 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing GifName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-485 |
ZDI-CAN-10164 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTitleTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-484 |
ZDI-CAN-10162 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wMailBlindCopyToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-483 |
ZDI-CAN-10161 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wMessageLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-482 |
ZDI-CAN-10160 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wMailToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-481 |
ZDI-CAN-10159 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wMailCopyToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-480 |
ZDI-CAN-10158 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wMailContentLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-479 |
ZDI-CAN-10157 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-478 |
ZDI-CAN-10153 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTDateLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-477 |
ZDI-CAN-10152 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTTimeLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-476 |
ZDI-CAN-10151 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wKPFStringLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-475 |
ZDI-CAN-10163 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wKPFStringLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-474 |
ZDI-CAN-10150 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTitleLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-473 |
ZDI-CAN-10149 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wKPFString Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-472 |
ZDI-CAN-10148 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-471 |
ZDI-CAN-10145 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
|
Eaton HMiSoft VU3 File Parsing wTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-470 |
ZDI-CAN-10638 |
Microsoft |
CVE-2020-0906 |
7.8 |
2020-04-15 |
|
Microsoft Excel XLS File Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-469 |
ZDI-CAN-10140 |
Microsoft |
CVE-2020-0906 |
3.3 |
2020-04-15 |
|
Microsoft Excel XLSM File Use-After-Free Information Disclosure Vulnerability |
ZDI-20-468 |
ZDI-CAN-10027 |
Microsoft |
CVE-2020-0932 |
8.8 |
2020-04-15 |
2020-10-27 |
Microsoft SharePoint TypeConverter Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-467 |
ZDI-CAN-10403 |
Microsoft |
CVE-2020-0821 |
3.3 |
2020-04-15 |
|
Microsoft Windows user32 Icon Extraction Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-466 |
ZDI-CAN-10054 |
Microsoft |
CVE-2020-0953 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-465 |
ZDI-CAN-10089 |
Microsoft |
CVE-2020-0931 |
8.8 |
2020-04-15 |
|
Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-464 |
ZDI-CAN-10062 |
Microsoft |
CVE-2020-0960 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-463 |
ZDI-CAN-10061 |
Microsoft |
CVE-2020-0959 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-462 |
ZDI-CAN-10058 |
Microsoft |
CVE-2020-0953 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-461 |
ZDI-CAN-10063 |
Microsoft |
CVE-2020-0992 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-460 |
ZDI-CAN-9968 |
Microsoft |
CVE-2020-0992 |
7.0 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability |
ZDI-20-459 |
ZDI-CAN-9934 |
Microsoft |
CVE-2020-0956 |
8.8 |
2020-04-15 |
|
Microsoft Windows Palette Object Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-458 |
ZDI-CAN-10057 |
Microsoft |
CVE-2020-0988 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-457 |
ZDI-CAN-10059 |
Microsoft |
CVE-2020-0994 |
7.8 |
2020-04-15 |
|
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-456 |
ZDI-CAN-9748 |
Microsoft |
CVE-2020-0821 |
3.3 |
2020-04-15 |
|
Microsoft Windows KERNELBASE Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-455 |
ZDI-CAN-10068 |
Adobe |
CVE-2020-3809 |
3.3 |
2020-04-15 |
|
Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-454 |
ZDI-CAN-10137 |
Fuji Electric |
|
7.8 |
2020-04-09 |
|
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-453 |
ZDI-CAN-10138 |
Fuji Electric |
|
7.8 |
2020-04-09 |
|
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-452 |
ZDI-CAN-10120 |
Fuji Electric |
CVE-2020-10646 |
7.8 |
2020-04-09 |
|
Fuji Electric V-Server Lite VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-451 |
ZDI-CAN-10119 |
Fuji Electric |
CVE-2020-10646 |
7.8 |
2020-04-09 |
|
Fuji Electric V-Server Lite VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-450 |
ZDI-CAN-10176 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
|
(0Day) Advantech WebAccess IOCTL 0x2738 Arbitrary File Deletion Vulnerability |
ZDI-20-449 |
ZDI-CAN-10174 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
|
(0Day) Advantech WebAccess IOCTL 0x2711 BwFLApp Arbitrary File Deletion Vulnerability |
ZDI-20-448 |
ZDI-CAN-10173 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
|
(0Day) Advantech WebAccess IOCTL 0x2711 BwPSLink Arbitrary File Deletion Vulnerability |
ZDI-20-447 |
ZDI-CAN-10170 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
|
(0Day) Advantech WebAccess IOCTL 0x2711 BwPFile Arbitrary File Deletion Vulnerability |
ZDI-20-446 |
ZDI-CAN-10175 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
|
(0Day) Advantech WebAccess webvrpc IOCTL 0x2715 Arbitrary File Deletion Vulnerability |
ZDI-20-445 |
ZDI-CAN-9827 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS addLinkMonitor SQL Injection Information Disclosure Vulnerability |
ZDI-20-444 |
ZDI-CAN-9826 |
Advantech |
CVE-2020-10603 |
8.8 |
2020-04-08 |
|
Advantech WebAccess/NMS DatabaseMgmtResource OS Command Injection Remote Code Execution Vulnerability |
ZDI-20-443 |
ZDI-CAN-9825 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS getTrunkNumber SQL Injection Information Disclosure Vulnerability |
ZDI-20-442 |
ZDI-CAN-9824 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-441 |
ZDI-CAN-9823 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-440 |
ZDI-CAN-9822 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-439 |
ZDI-CAN-9821 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-438 |
ZDI-CAN-9820 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-437 |
ZDI-CAN-9819 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-436 |
ZDI-CAN-9818 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-435 |
ZDI-CAN-9817 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-434 |
ZDI-CAN-9816 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-433 |
ZDI-CAN-9815 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-432 |
ZDI-CAN-9814 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-431 |
ZDI-CAN-9813 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-430 |
ZDI-CAN-9812 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-429 |
ZDI-CAN-9810 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-428 |
ZDI-CAN-9807 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-427 |
ZDI-CAN-9806 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-426 |
ZDI-CAN-9805 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-425 |
ZDI-CAN-9804 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-424 |
ZDI-CAN-9803 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-423 |
ZDI-CAN-9802 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-422 |
ZDI-CAN-9801 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-421 |
ZDI-CAN-9800 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
|
Advantech WebAccess/NMS setDevicechoose SQL Injection Information Disclosure Vulnerability |
ZDI-20-420 |
ZDI-CAN-9799 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
|
Advantech WebAccess/NMS getFWUpgradeInfo SQL Injection Information Disclosure Vulnerability |
ZDI-20-419 |
ZDI-CAN-9793 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-418 |
ZDI-CAN-9778 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-417 |
ZDI-CAN-9777 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-416 |
ZDI-CAN-9776 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-415 |
ZDI-CAN-9775 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-414 |
ZDI-CAN-9769 |
Advantech |
CVE-2020-10625 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS UsersInputAction Missing Authentication for Critical Function Authentication Bypass Vulnerability |
ZDI-20-413 |
ZDI-CAN-9764 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
|
Advantech WebAccess/NMS getSyslogUiList SQL Injection Information Disclosure Vulnerability |
ZDI-20-412 |
ZDI-CAN-9765 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DeviceData Performance SQL Injection Information Disclosure Vulnerability |
ZDI-20-411 |
ZDI-CAN-9760 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS MibBrowser SQL Injection Information Disclosure Vulnerability |
ZDI-20-410 |
ZDI-CAN-9759 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS MibBrowser SQL Injection Information Disclosure Vulnerability |
ZDI-20-409 |
ZDI-CAN-9701 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS single-vlan-info SQL Injection Information Disclosure Vulnerability |
ZDI-20-408 |
ZDI-CAN-9700 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-407 |
ZDI-CAN-9699 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-406 |
ZDI-CAN-9693 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS ProfileResource Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-405 |
ZDI-CAN-9692 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS DBBackupResource Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-404 |
ZDI-CAN-9629 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-403 |
ZDI-CAN-9628 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-402 |
ZDI-CAN-9627 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS ConfigRestoreAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-401 |
ZDI-CAN-9623 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-400 |
ZDI-CAN-9614 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS DBBackupRestoreAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-399 |
ZDI-CAN-9613 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-398 |
ZDI-CAN-9605 |
Advantech |
|
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS AccesslogAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-397 |
ZDI-CAN-9602 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS SupportDeviceaddAction Arbitrary File Upload Remote Code Execution Vulnerability |
ZDI-20-396 |
ZDI-CAN-9601 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-395 |
ZDI-CAN-9589 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-394 |
ZDI-CAN-9588 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
ZDI-20-393 |
ZDI-CAN-9587 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS forcedScanDevice SQL Injection Information Disclosure Vulnerability |
ZDI-20-392 |
ZDI-CAN-9585 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS FwStatusReportAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-391 |
ZDI-CAN-9584 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS FwStatusReportAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-390 |
ZDI-CAN-9583 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS TopogroupeditAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-389 |
ZDI-CAN-9582 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS FwUpgradeAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-388 |
ZDI-CAN-9581 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS TopogroupeditAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-387 |
ZDI-CAN-9580 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS extProgramAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-386 |
ZDI-CAN-9579 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS extProgramAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-385 |
ZDI-CAN-9578 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS LicenseImportAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-384 |
ZDI-CAN-9577 |
Advantech |
CVE-2020-10631 |
9.1 |
2020-04-08 |
|
Advantech WebAccess/NMS download.jsp Directory Traversal Information Disclosure and Denial-of-Service Vulnerability |
ZDI-20-383 |
ZDI-CAN-9576 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS FwUpgradeAction Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-382 |
ZDI-CAN-9575 |
Advantech |
CVE-2020-10629 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS MibbrowserTrapAddAction XML External Entity Reference Information Disclosure Vulnerability |
ZDI-20-381 |
ZDI-CAN-9574 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS reflashEventLog SQL Injection Information Disclosure Vulnerability |
ZDI-20-380 |
ZDI-CAN-9573 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS Login SQL Injection Information Disclosure Vulnerability |
ZDI-20-379 |
ZDI-CAN-9572 |
Advantech |
CVE-2020-10619 |
8.2 |
2020-04-08 |
|
Advantech WebAccess/NMS saveBackgroundAction Directory Traversal Denial-of-Service Vulnerability |
ZDI-20-378 |
ZDI-CAN-9571 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS saveBackground SQL Injection Information Disclosure Vulnerability |
ZDI-20-377 |
ZDI-CAN-9570 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS EMSgroupAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-376 |
ZDI-CAN-9569 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS mibBrowserSetAction SQL Injection Information Disclosure Vulnerability |
ZDI-20-375 |
ZDI-CAN-9568 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS searchDevice SQL Injection Information Disclosure Vulnerability |
ZDI-20-374 |
ZDI-CAN-9567 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
|
Advantech WebAccess/NMS Login isAccessDenied SQL Injection Information Disclosure Vulnerability |
ZDI-20-373 |
ZDI-CAN-9566 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
|
Advantech WebAccess/NMS saveBackground Unrestricted File Upload Remote Code Execution Vulnerability |
ZDI-20-372 |
ZDI-CAN-9598 |
Adobe |
CVE-2020-3766 |
7.8 |
2020-04-07 |
|
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-371 |
ZDI-CAN-9757 |
Schneider Electric |
CVE-2020-7478 |
7.5 |
2020-04-03 |
|
Schneider Electric IGSS IGSSupdateservice Directory Traversal Information Disclosure Vulnerability |
ZDI-20-370 |
ZDI-CAN-9758 |
Schneider Electric |
CVE-2020-7479 |
7.8 |
2020-04-03 |
|
Schneider Electric IGSS IGSSupdateservice Improper Access Control Privilege Escalation Vulnerability |
ZDI-20-369 |
ZDI-CAN-9345 |
VMware |
|
6.3 |
2020-04-03 |
|
VMware Workstation OVF NTLM Challenge Response Information Disclosure Vulnerability |
ZDI-20-368 |
ZDI-CAN-9770 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-367 |
ZDI-CAN-9772 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-366 |
ZDI-CAN-9771 |
Corel |
|
7.8 |
2020-04-02 |
2021-03-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-365 |
ZDI-CAN-9698 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-364 |
ZDI-CAN-9697 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-363 |
ZDI-CAN-9696 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-362 |
ZDI-CAN-9695 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-361 |
ZDI-CAN-9694 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-360 |
ZDI-CAN-9639 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-359 |
ZDI-CAN-9638 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-358 |
ZDI-CAN-9637 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-357 |
ZDI-CAN-9636 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-356 |
ZDI-CAN-9635 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-355 |
ZDI-CAN-9634 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-354 |
ZDI-CAN-9633 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-353 |
ZDI-CAN-9632 |
Corel |
|
7.8 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-352 |
ZDI-CAN-9631 |
Corel |
|
3.3 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-351 |
ZDI-CAN-9630 |
Corel |
|
3.3 |
2020-04-02 |
|
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-350 |
ZDI-CAN-10780 |
Linux |
CVE-2020-8835 |
8.8 |
2020-03-31 |
|
(Pwn2Own) Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability |
ZDI-20-349 |
ZDI-CAN-9950 |
IBM |
CVE-2020-4240 |
6.5 |
2020-03-31 |
|
IBM Spectrum Protect Plus plugin Directory Traversal File Creation Vulnerability |
ZDI-20-348 |
ZDI-CAN-9958 |
IBM |
CVE-2020-4241 |
8.8 |
2020-03-31 |
|
IBM Spectrum Protect Plus uploadHttpsCertificate Command Injection Remote Code Execution Vulnerability |
ZDI-20-347 |
ZDI-CAN-9957 |
IBM |
CVE-2020-4242 |
8.8 |
2020-03-31 |
|
IBM Spectrum Protect Plus uploadLdapCertificate Command Injection Remote Code Execution Vulnerability |
ZDI-20-346 |
ZDI-CAN-9953 |
IBM |
CVE-2020-4208 |
7.3 |
2020-03-31 |
|
IBM Spectrum Protect Plus serveradmin Authentication Bypass Vulnerability |
ZDI-20-345 |
ZDI-CAN-9952 |
IBM |
CVE-2020-4209 |
5.4 |
2020-03-31 |
|
IBM Spectrum Protect Plus uploadHttpsCertificate Directory Traversal File Creation Vulnerability |
ZDI-20-344 |
ZDI-CAN-9951 |
IBM |
CVE-2020-4209 |
5.4 |
2020-03-31 |
|
IBM Spectrum Protect Plus uploadLdapCertificate Directory Traversal File Creation Vulnerability |
ZDI-20-343 |
ZDI-CAN-9949 |
IBM |
CVE-2020-4214 |
8.2 |
2020-03-31 |
|
IBM Spectrum Protect Plus cleanupUpdateImage Arbitrary Directory Deletion Vulnerability |
ZDI-20-342 |
ZDI-CAN-9753 |
IBM |
CVE-2020-4206 |
8.8 |
2020-03-31 |
|
IBM Spectrum Protect Plus timezone Command Injection Remote Code Execution Vulnerability |
ZDI-20-341 |
ZDI-CAN-9855 |
Apple |
CVE-2020-3897 |
6.3 |
2020-03-26 |
|
Apple Safari Object Transition Cache Type Confusion Remote Code Execution Vulnerability |
ZDI-20-340 |
ZDI-CAN-9664 |
TP-Link |
CVE-2020-10888 |
5.9 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 SSH Port Forwarding Authentication Bypass Vulnerability |
ZDI-20-339 |
ZDI-CAN-9662 |
TP-Link |
CVE-2020-10886 |
8.1 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 tmpServer Command Injection Remote Code Execution Vulnerability |
ZDI-20-338 |
ZDI-CAN-9663 |
TP-Link |
CVE-2020-10887 |
8.1 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 Protection Mechanism Failure Firewall Bypass Vulnerability |
ZDI-20-337 |
ZDI-CAN-9661 |
TP-Link |
CVE-2020-10885 |
8.1 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 DNS Response Improper Input Validation Remote Code Execution Vulnerability |
ZDI-20-336 |
ZDI-CAN-9652 |
TP-Link |
CVE-2020-10884 |
8.1 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 tdpServer Use of Hard-coded Cryptographic Key Remote Code Execution Vulnerability |
ZDI-20-335 |
ZDI-CAN-9651 |
TP-Link |
CVE-2020-10883 |
5.3 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 File System Incorrect Permission Assignment for Critical Resource Privilege Escalation Vulnerability |
ZDI-20-334 |
ZDI-CAN-9650 |
TP-Link |
CVE-2020-10882 |
8.8 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 tdpServer Command Injection Remote Code Execution Vulnerability |
ZDI-20-333 |
ZDI-CAN-9660 |
TP-Link |
CVE-2020-10881 |
9.8 |
2020-03-25 |
|
(Pwn2Own) TP-Link Archer A7 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-332 |
ZDI-CAN-9808 |
Adobe |
CVE-2020-3764 |
7.8 |
2020-03-24 |
|
Adobe Media Encoder CC MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-331 |
ZDI-CAN-10070 |
Adobe |
CVE-2020-3764 |
7.8 |
2020-03-24 |
|
Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-330 |
ZDI-CAN-10126 |
Adobe |
CVE-2020-3802 |
7.8 |
2020-03-19 |
|
Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-329 |
ZDI-CAN-9984 |
Adobe |
CVE-2020-9552 |
7.8 |
2020-03-19 |
|
Adobe Bridge XD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-328 |
ZDI-CAN-9705 |
Adobe |
CVE-2020-9551 |
7.8 |
2020-03-19 |
|
Adobe Bridge CC GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-327 |
ZDI-CAN-9599 |
Adobe |
CVE-2020-3766 |
8.4 |
2020-03-19 |
|
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-326 |
ZDI-CAN-9597 |
Adobe |
CVE-2020-3766 |
8.4 |
2020-03-19 |
|
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
ZDI-20-325 |
ZDI-CAN-9484 |
Adobe |
CVE-2020-3791 |
3.3 |
2020-03-19 |
|
Adobe Photoshop Type 1 Font Parsing Charstring Out-of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-324 |
ZDI-CAN-10034 |
Adobe |
CVE-2020-3790 |
7.8 |
2020-03-19 |
|
Adobe Photoshop DCM File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-323 |
ZDI-CAN-10050 |
Adobe |
CVE-2020-3782 |
3.3 |
2020-03-19 |
|
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-322 |
ZDI-CAN-10051 |
Adobe |
CVE-2020-3781 |
3.3 |
2020-03-19 |
|
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-321 |
ZDI-CAN-10053 |
Adobe |
CVE-2020-3780 |
7.8 |
2020-03-19 |
|
Adobe Photoshop EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-320 |
ZDI-CAN-10065 |
Adobe |
CVE-2020-3779 |
7.8 |
2020-03-19 |
|
Adobe Photoshop GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-319 |
ZDI-CAN-10019 |
Adobe |
CVE-2020-3778 |
3.3 |
2020-03-19 |
|
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-318 |
ZDI-CAN-9989 |
Adobe |
CVE-2020-3773 |
7.8 |
2020-03-19 |
|
Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-317 |
ZDI-CAN-10013 |
Adobe |
CVE-2020-3772 |
7.8 |
2020-03-19 |
|
Adobe Photoshop U3D File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-316 |
ZDI-CAN-9809 |
Adobe |
CVE-2020-3771 |
3.3 |
2020-03-19 |
|
Adobe Photoshop DCM Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-315 |
ZDI-CAN-9926 |
Adobe |
CVE-2020-3770 |
7.8 |
2020-03-19 |
|
Adobe Photoshop PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-314 |
ZDI-CAN-9645 |
Samsung |
|
8.8 |
2020-03-18 |
|
(Pwn2Own) Samsung Q60 Smart QLED TV JavaScript Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-313 |
ZDI-CAN-10131 |
Microsoft |
|
7.8 |
2020-03-18 |
|
Microsoft Windows AppX Deployment Service Hard Link Privilege Escalation Vulnerability |
ZDI-20-312 |
ZDI-CAN-9931 |
Foxit |
CVE-2020-8870 |
7.8 |
2020-03-18 |
|
Foxit Studio Photo GetTIFPalette TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-311 |
ZDI-CAN-9881 |
Foxit |
CVE-2020-8869 |
7.8 |
2020-03-18 |
|
Foxit Studio Photo TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-310 |
ZDI-CAN-10420 |
Delta Industrial Automation |
CVE-2020-6976 |
3.3 |
2020-03-17 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Giffile Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-309 |
ZDI-CAN-10413 |
Delta Industrial Automation |
CVE-2020-7002 |
7.8 |
2020-03-17 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-308 |
ZDI-CAN-10141 |
Delta Industrial Automation |
CVE-2020-7002 |
7.8 |
2020-03-17 |
|
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing GifName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-307 |
ZDI-CAN-10073 |
Trend Micro |
CVE-2020-8600 |
8.6 |
2020-03-17 |
|
Trend Micro Worry-Free Business Security Directory Traversal Authentication Bypass Vulnerability |
ZDI-20-306 |
ZDI-CAN-9880 |
Foxit |
CVE-2020-8883 |
3.3 |
2020-03-16 |
|
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-305 |
ZDI-CAN-9811 |
Foxit |
CVE-2020-8882 |
7.8 |
2020-03-16 |
|
Foxit Studio Photo PSD File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-304 |
ZDI-CAN-9774 |
Foxit |
CVE-2020-8881 |
7.8 |
2020-03-16 |
|
Foxit Studio Photo TIF File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-303 |
ZDI-CAN-9773 |
Foxit |
CVE-2020-8880 |
7.8 |
2020-03-16 |
|
Foxit Studio Photo TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-302 |
ZDI-CAN-9626 |
Foxit |
CVE-2020-8879 |
3.3 |
2020-03-16 |
|
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-301 |
ZDI-CAN-9625 |
Foxit |
CVE-2020-8878 |
7.8 |
2020-03-16 |
|
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-300 |
ZDI-CAN-9624 |
Foxit |
CVE-2020-8877 |
3.3 |
2020-03-16 |
2020-03-17 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-299 |
ZDI-CAN-10099 |
VMware |
CVE-2020-3948 |
7.8 |
2020-03-13 |
2021-03-02 |
VMware Workstation Virtual Printer External Control of File Name Privilege Escalation Vulnerability |
ZDI-20-298 |
ZDI-CAN-9292 |
VMware |
CVE-2020-3947 |
7.8 |
2020-03-13 |
|
VMware Workstation vmnetdhcp Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-297 |
ZDI-CAN-10029 |
Parallels |
CVE-2020-8876 |
6.5 |
2020-03-13 |
|
Parallels Desktop OS X Host Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-296 |
ZDI-CAN-10028 |
Parallels |
CVE-2020-8875 |
8.8 |
2020-03-13 |
|
Parallels Desktop OS X Host Kernel Module Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-295 |
ZDI-CAN-10032 |
Parallels |
CVE-2020-8874 |
7.5 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Integer Overflow Privilege Escalation Vulnerability |
ZDI-20-294 |
ZDI-CAN-10031 |
Parallels |
CVE-2020-8873 |
8.2 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-293 |
ZDI-CAN-9428 |
Parallels |
CVE-2020-8872 |
6.0 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-292 |
ZDI-CAN-9403 |
Parallels |
CVE-2020-8871 |
8.2 |
2020-03-13 |
2021-03-02 |
Parallels Desktop VGA Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-291 |
ZDI-CAN-9460 |
SAP |
CVE-2020-6208 |
8.2 |
2020-03-12 |
|
SAP Crystal Reports RPT File Parsing Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-290 |
ZDI-CAN-9553 |
Quest |
CVE-2020-8868 |
9.8 |
2020-03-12 |
|
Quest Foglight Evolve CommandLineService Use of Hard-coded Credentials Remote Code Execution Vulnerability |
ZDI-20-289 |
ZDI-CAN-9665 |
Xiaomi |
CVE-2020-9530 |
8.8 |
2020-03-12 |
|
(Pwn2Own) Xiaomi Mi9 Browser manualUpgradeInfo Improper Control of Generation of Code Remote Code Execution Vulnerability |
ZDI-20-288 |
ZDI-CAN-9657 |
Xiaomi |
CVE-2020-9531 |
5.3 |
2020-03-12 |
|
(Pwn2Own) Xiaomi GetApps Intent Privilege Escalation Vulnerability |
ZDI-20-287 |
ZDI-CAN-9656 |
Xiaomi |
CVE-2020-9531 |
5.5 |
2020-03-12 |
|
(Pwn2Own) Xiaomi Mi9 Browser Untrusted Site Redirection Remote Code Execution Vulnerability |
ZDI-20-286 |
ZDI-CAN-9646 |
Xiaomi |
|
8.8 |
2020-03-12 |
|
(Pwn2Own) Xiaomi Mi9 Browser ParseFormalParameterList Improper Input Validation Remote Code Execution Vulnerability |
ZDI-20-285 |
ZDI-CAN-10525 |
Microsoft |
CVE-2020-0807 |
8.8 |
2020-03-12 |
|
Microsoft Windows Media Player AVI Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-284 |
ZDI-CAN-9959 |
Microsoft |
CVE-2020-0851 |
7.8 |
2020-03-12 |
|
Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-283 |
ZDI-CAN-9875 |
Microsoft |
CVE-2020-0887 |
8.8 |
2020-03-12 |
|
Microsoft Windows Printer Device Context Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-282 |
ZDI-CAN-9691 |
Microsoft |
CVE-2020-0841 |
6.1 |
2020-03-12 |
|
Microsoft Windows DiagTrack Service Hard Link Denial-of-Service Vulnerability |
ZDI-20-281 |
ZDI-CAN-9502 |
Microsoft |
CVE-2020-0840 |
7.8 |
2020-03-12 |
|
Microsoft Windows AppX Deployment Service Hard Link Escalation of Privilege Vulnerability |
ZDI-20-280 |
ZDI-CAN-9858 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
|
Microsoft Windows CreateXlateObject Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-279 |
ZDI-CAN-9857 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
|
Microsoft Windows CreateXlateObject Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-278 |
ZDI-CAN-9856 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
|
Microsoft Windows ulGetNearestIndexFromColorref Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-277 |
ZDI-CAN-9473 |
Microsoft |
CVE-2020-0776 |
6.1 |
2020-03-12 |
|
Microsoft Windows AppX Deployment Service Link Resolution Denial-of-Service Vulnerability |
ZDI-20-276 |
ZDI-CAN-10469 |
Horde |
CVE-2020-8865 |
6.3 |
2020-03-10 |
|
Horde Groupware Webmail Edition edit Page Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-275 |
ZDI-CAN-10125 |
Horde |
CVE-2020-8866 |
4.3 |
2020-03-10 |
|
Horde Groupware Webmail Edition add Page Unrestricted File Upload Arbitrary File Creation Vulnerability |
ZDI-20-274 |
ZDI-CAN-9956 |
IBM |
CVE-2020-4210 |
9.8 |
2020-03-05 |
|
IBM Spectrum Protect Plus changeAdministratorPassword Command Injection Remote Code Execution Vulnerability |
ZDI-20-273 |
ZDI-CAN-9955 |
IBM |
CVE-2020-4211 |
9.8 |
2020-03-05 |
|
IBM Spectrum Protect Plus hostname Command Injection Remote Code Execution Vulnerability |
ZDI-20-272 |
ZDI-CAN-9954 |
IBM |
CVE-2020-4212 |
9.8 |
2020-03-05 |
|
IBM Spectrum Protect Plus hfpackage Command Injection Remote Code Execution Vulnerability |
ZDI-20-271 |
ZDI-CAN-9752 |
IBM |
CVE-2020-4222 |
9.8 |
2020-03-05 |
|
IBM Spectrum Protect Plus password Command Injection Remote Code Execution Vulnerability |
ZDI-20-270 |
ZDI-CAN-9750 |
IBM |
CVE-2020-4213 |
9.8 |
2020-03-05 |
|
IBM Spectrum Protect Plus username Command Injection Remote Code Execution Vulnerability |
ZDI-20-269 |
ZDI-CAN-9491 |
Cisco |
CVE-2020-3127 |
7.8 |
2020-03-05 |
|
Cisco WebEx Network Recording Player ARF File Uninitialized Pointer Remote Code Execution Vulnerability |
ZDI-20-268 |
ZDI-CAN-9471 |
D-Link |
CVE-2020-8864 |
8.8 |
2020-02-24 |
|
D-Link Multiple Routers HNAP strncmp Incorrect Comparison Authentication Bypass Vulnerability |
ZDI-20-267 |
ZDI-CAN-9470 |
D-Link |
CVE-2020-8863 |
8.8 |
2020-02-24 |
|
D-Link Multiple Routers HNAP PrivateLogin Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
ZDI-20-266 |
ZDI-CAN-10082 |
D-Link |
CVE-2020-8862 |
8.8 |
2020-02-21 |
|
D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability |
ZDI-20-265 |
ZDI-CAN-9554 |
D-Link |
CVE-2020-8861 |
8.8 |
2020-02-21 |
|
D-Link DAP-1330 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
ZDI-20-264 |
ZDI-CAN-9304 |
WECON |
|
7.8 |
2020-02-20 |
|
(0Day) WECON LeviStudioU MulStatus szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-263 |
ZDI-CAN-9290 |
WECON |
|
7.8 |
2020-02-20 |
|
(0Day) WECON LeviStudioU G_bmp szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-262 |
ZDI-CAN-9280 |
WECON |
|
7.8 |
2020-02-20 |
|
(0Day) WECON LeviStudioU G_bmp szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-261 |
ZDI-CAN-9309 |
Rockwell Automation |
CVE-2020-6967 |
9.8 |
2020-02-20 |
|
(0Day) Rockwell Automation FactoryTalk RNADiagnosticsSrv Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-260 |
ZDI-CAN-8315 |
AMD |
|
6.2 |
2020-02-20 |
|
(0Day) AMD Radeon Divide By Zero Denial of Service Vulnerability |
ZDI-20-259 |
ZDI-CAN-10076 |
Microsoft |
CVE-2020-0792 |
8.8 |
2020-02-20 |
|
Microsoft Windows NtUserResolveDesktopForWOW Heap-based Buffer Overflow Privilege Escalation Vulnerability |
ZDI-20-258 |
ZDI-CAN-9615 |
Microsoft |
CVE-2020-0688 |
8.8 |
2020-02-20 |
|
Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability |
ZDI-20-257 |
ZDI-CAN-9538 |
Microsoft |
CVE-2020-0668 |
7.8 |
2020-02-20 |
2020-03-09 |
Microsoft Windows Service Tracing Arbitrary File Move Privilege Escalation Vulnerability |
ZDI-20-256 |
ZDI-CAN-9666 |
Samsung |
|
8.4 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 IndexedDB Use-After-Free Sandbox Escape Vulnerability |
ZDI-20-255 |
ZDI-CAN-9658 |
Samsung |
CVE-2020-8860 |
7.1 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 Call Control Setup Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-254 |
ZDI-CAN-9655 |
Samsung |
|
8.4 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 FileWriter Use-After-Free Sandbox Escape Vulnerability |
ZDI-20-253 |
ZDI-CAN-9654 |
Samsung |
|
6.3 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-252 |
ZDI-CAN-10115 |
ELOG |
CVE-2020-8859 |
5.3 |
2020-02-12 |
|
ELOG Electronic Logbook drop-count Null Pointer Dereference Denial-of-Service Vulnerability |
ZDI-20-251 |
ZDI-CAN-9454 |
Adobe |
CVE-2020-3740 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-250 |
ZDI-CAN-9453 |
Adobe |
CVE-2020-3739 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker IFF File Parsing Memory Corruption Remote Code Execution Vulnerability |
ZDI-20-249 |
ZDI-CAN-9617 |
Adobe |
CVE-2020-3748 |
7.8 |
2020-02-12 |
|
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-248 |
ZDI-CAN-9432 |
Adobe |
CVE-2020-3738 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TIF File Parsing Type Confusion Remote Code Execution Vulnerability |
ZDI-20-247 |
ZDI-CAN-9436 |
Adobe |
CVE-2020-3737 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-246 |
ZDI-CAN-9445 |
Adobe |
CVE-2020-3736 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-245 |
ZDI-CAN-9446 |
Adobe |
CVE-2020-3735 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-244 |
ZDI-CAN-9447 |
Adobe |
CVE-2020-3734 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-243 |
ZDI-CAN-9442 |
Adobe |
CVE-2020-3733 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-242 |
ZDI-CAN-9444 |
Adobe |
CVE-2020-3732 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker IFF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-241 |
ZDI-CAN-9443 |
Adobe |
CVE-2020-3731 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker CEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-240 |
ZDI-CAN-9439 |
Adobe |
CVE-2020-3730 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-239 |
ZDI-CAN-9430 |
Adobe |
CVE-2020-3729 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-238 |
ZDI-CAN-9435 |
Adobe |
CVE-2020-3728 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-237 |
ZDI-CAN-9437 |
Adobe |
CVE-2020-3727 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-236 |
ZDI-CAN-9438 |
Adobe |
CVE-2020-3726 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-235 |
ZDI-CAN-9440 |
Adobe |
CVE-2020-3725 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-234 |
ZDI-CAN-9441 |
Adobe |
CVE-2020-3724 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-233 |
ZDI-CAN-9429 |
Adobe |
CVE-2020-3723 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-232 |
ZDI-CAN-9431 |
Adobe |
CVE-2020-3722 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-231 |
ZDI-CAN-9433 |
Adobe |
CVE-2020-3721 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-230 |
ZDI-CAN-9434 |
Adobe |
CVE-2020-3720 |
7.8 |
2020-02-12 |
|
Adobe FrameMaker PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-229 |
ZDI-CAN-9418 |
Symantec |
CVE-2020-5826 |
5.5 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Out-of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-228 |
ZDI-CAN-9397 |
Symantec |
CVE-2020-5825 |
7.1 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Missing Authentication Arbitrary File Move Vulnerability |
ZDI-20-227 |
ZDI-CAN-9404 |
Symantec |
CVE-2020-5825 |
5.5 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Missing Authentication Denial-of-Service Vulnerability |
ZDI-20-226 |
ZDI-CAN-9396 |
Symantec |
CVE-2020-5825 |
6.1 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Missing Authentication Arbitrary File Rename Vulnerability |
ZDI-20-225 |
ZDI-CAN-9537 |
Symantec |
CVE-2020-5831 |
3.3 |
2020-02-11 |
|
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-224 |
ZDI-CAN-9536 |
Symantec |
CVE-2020-5830 |
3.3 |
2020-02-11 |
|
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-223 |
ZDI-CAN-9535 |
Symantec |
CVE-2020-5829 |
3.3 |
2020-02-11 |
|
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-222 |
ZDI-CAN-9534 |
Symantec |
CVE-2020-5828 |
3.3 |
2020-02-11 |
|
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-221 |
ZDI-CAN-9395 |
Symantec |
CVE-2020-5824 |
5.5 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Missing Authentication Denial-of-Service Vulnerability |
ZDI-20-220 |
ZDI-CAN-9459 |
Symantec |
CVE-2020-5827 |
3.3 |
2020-02-11 |
|
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-219 |
ZDI-CAN-9450 |
Symantec |
CVE-2020-5823 |
7.8 |
2020-02-11 |
|
Symantec Endpoint Protection ccJobMgr Missing Authentication Privilege Escalation Vulnerability |
ZDI-20-218 |
ZDI-CAN-9426 |
Symantec |
CVE-2020-5822 |
7.8 |
2020-02-11 |
|
Symantec Endpoint Protection ccSvc Missing Authentication Privilege Escalation Vulnerability |
ZDI-20-217 |
ZDI-CAN-9420 |
Symantec |
CVE-2020-5820 |
7.8 |
2020-02-11 |
|
Symantec Endpoint Protection AvHostPlugin Out-Of-Bounds Write Privilege Escalation Vulnerability |
ZDI-20-216 |
ZDI-CAN-9383 |
Apple |
CVE-2020-3877 |
7.5 |
2020-02-11 |
|
Apple Messages HandwritingProvider Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-215 |
ZDI-CAN-9595 |
Apple |
CVE-2020-3839 |
7.1 |
2020-02-11 |
|
Apple macOS IO80211Family Stack-based Buffer Overflow Information Disclosure Vulnerability |
ZDI-20-214 |
ZDI-CAN-9552 |
Moxa |
CVE-2020-8858 |
8.8 |
2020-02-11 |
2020-04-01 |
Moxa MGate 5105-MB-EIP DestIP Command Injection Remote Code Execution Vulnerability |
ZDI-20-213 |
ZDI-CAN-9862 |
Foxit |
CVE-2020-8857 |
7.8 |
2020-02-11 |
|
Foxit Reader Annotations AcroForm Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-212 |
ZDI-CAN-9640 |
Foxit |
CVE-2020-8856 |
7.8 |
2020-02-11 |
|
Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-211 |
ZDI-CAN-9560 |
Foxit |
CVE-2020-8855 |
7.8 |
2020-02-11 |
|
Foxit PhantomPDF fxhtml2pdf Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-210 |
ZDI-CAN-9606 |
Foxit |
CVE-2020-8854 |
7.8 |
2020-02-11 |
|
Foxit PhantomPDF JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-209 |
ZDI-CAN-9591 |
Foxit |
CVE-2020-8853 |
7.8 |
2020-02-11 |
|
Foxit PhantomPDF HTML2PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-208 |
ZDI-CAN-9416 |
Foxit |
CVE-2020-8852 |
3.3 |
2020-02-11 |
|
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-207 |
ZDI-CAN-9406 |
Foxit |
CVE-2020-8851 |
7.8 |
2020-02-11 |
2020-11-17 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-206 |
ZDI-CAN-9415 |
Foxit |
CVE-2020-8850 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-205 |
ZDI-CAN-9413 |
Foxit |
CVE-2020-8849 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-204 |
ZDI-CAN-9407 |
Foxit |
CVE-2020-8848 |
7.8 |
2020-02-11 |
2020-11-17 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-203 |
ZDI-CAN-9414 |
Foxit |
CVE-2020-8847 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-202 |
ZDI-CAN-9400 |
Foxit |
CVE-2020-8846 |
7.8 |
2020-02-11 |
2020-02-18 |
Foxit PhantomPDF text Field Object Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-201 |
ZDI-CAN-9358 |
Foxit |
CVE-2020-8845 |
7.8 |
2020-02-11 |
|
Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability |
ZDI-20-200 |
ZDI-CAN-9102 |
Foxit |
CVE-2020-8844 |
7.8 |
2020-02-11 |
|
Foxit Reader ConvertToPDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability |
ZDI-20-199 |
ZDI-CAN-9549 |
Google |
CVE-2019-14088 |
7.8 |
2020-02-07 |
|
Google Android V4l2 cam_actuator_driver_cmd Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-198 |
ZDI-CAN-8956 |
Bitdefender |
CVE-2020-8095 |
6.1 |
2020-02-05 |
|
Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability |
ZDI-20-197 |
ZDI-CAN-9015 |
Hewlett Packard Enterprise |
CVE-2020-7176 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-196 |
ZDI-CAN-9013 |
Hewlett Packard Enterprise |
CVE-2020-7188 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-195 |
ZDI-CAN-9014 |
Hewlett Packard Enterprise |
CVE-2020-7185 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center tvxlanLegend Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-194 |
ZDI-CAN-9012 |
Hewlett Packard Enterprise |
CVE-2020-7177 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-193 |
ZDI-CAN-9011 |
Hewlett Packard Enterprise |
CVE-2020-7183 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center forwardredirect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-192 |
ZDI-CAN-9010 |
Hewlett Packard Enterprise |
CVE-2020-7184 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-191 |
ZDI-CAN-9009 |
Hewlett Packard Enterprise |
CVE-2020-7186 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center powershellConfigContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-190 |
ZDI-CAN-9008 |
Hewlett Packard Enterprise |
CVE-2020-7181 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-189 |
ZDI-CAN-9007 |
Hewlett Packard Enterprise |
CVE-2020-7179 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-188 |
ZDI-CAN-8997 |
Hewlett Packard Enterprise |
CVE-2020-7187 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center reportpage index Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-187 |
ZDI-CAN-9006 |
Hewlett Packard Enterprise |
CVE-2020-7182 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-186 |
ZDI-CAN-9005 |
Hewlett Packard Enterprise |
CVE-2020-7194 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-185 |
ZDI-CAN-8998 |
Hewlett Packard Enterprise |
CVE-2020-7163 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center navigationTo Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-184 |
ZDI-CAN-8990 |
Hewlett Packard Enterprise |
CVE-2020-7170 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-183 |
ZDI-CAN-8979 |
Hewlett Packard Enterprise |
CVE-2020-7165 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-182 |
ZDI-CAN-8978 |
Hewlett Packard Enterprise |
CVE-2020-7160 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-181 |
ZDI-CAN-8977 |
Hewlett Packard Enterprise |
CVE-2020-7175 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-180 |
ZDI-CAN-8996 |
Hewlett Packard Enterprise |
CVE-2020-7158 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-179 |
ZDI-CAN-9004 |
Hewlett Packard Enterprise |
CVE-2020-7168 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-178 |
ZDI-CAN-8958 |
Hewlett Packard Enterprise |
CVE-2020-7173 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center actionSelectContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-177 |
ZDI-CAN-9003 |
Hewlett Packard Enterprise |
CVE-2020-7164 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-176 |
ZDI-CAN-9002 |
Hewlett Packard Enterprise |
CVE-2020-7161 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-175 |
ZDI-CAN-9001 |
Hewlett Packard Enterprise |
CVE-2020-7174 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center soapConfigContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-174 |
ZDI-CAN-9000 |
Hewlett Packard Enterprise |
CVE-2020-7172 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-173 |
ZDI-CAN-8999 |
Hewlett Packard Enterprise |
CVE-2020-7167 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-172 |
ZDI-CAN-8995 |
Hewlett Packard Enterprise |
CVE-2020-7171 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-171 |
ZDI-CAN-8994 |
Hewlett Packard Enterprise |
CVE-2020-7169 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-170 |
ZDI-CAN-8993 |
Hewlett Packard Enterprise |
CVE-2020-7166 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-169 |
ZDI-CAN-8992 |
Hewlett Packard Enterprise |
CVE-2020-7162 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-168 |
ZDI-CAN-8991 |
Hewlett Packard Enterprise |
CVE-2020-7157 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center selViewNavContent Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-167 |
ZDI-CAN-8984 |
Hewlett Packard Enterprise |
CVE-2020-7178 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-166 |
ZDI-CAN-8983 |
Hewlett Packard Enterprise |
CVE-2020-7180 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-165 |
ZDI-CAN-8980 |
Hewlett Packard Enterprise |
CVE-2020-7153 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-164 |
ZDI-CAN-8985 |
Hewlett Packard Enterprise |
CVE-2020-7152 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultParasSet Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-163 |
ZDI-CAN-8986 |
Hewlett Packard Enterprise |
CVE-2020-7156 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultInfo_content Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-162 |
ZDI-CAN-8989 |
Hewlett Packard Enterprise |
CVE-2020-7155 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-161 |
ZDI-CAN-8988 |
Hewlett Packard Enterprise |
CVE-2020-7151 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultTrapGroupSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-160 |
ZDI-CAN-8987 |
Hewlett Packard Enterprise |
CVE-2020-7150 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultStatChooseFaultType Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-159 |
ZDI-CAN-8982 |
Hewlett Packard Enterprise |
CVE-2020-7154 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ifViewSelectPage Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-158 |
ZDI-CAN-8981 |
Hewlett Packard Enterprise |
CVE-2020-7149 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-157 |
ZDI-CAN-8976 |
Hewlett Packard Enterprise |
CVE-2020-7193 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-156 |
ZDI-CAN-8975 |
Hewlett Packard Enterprise |
CVE-2020-7195 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-155 |
ZDI-CAN-8974 |
Hewlett Packard Enterprise |
CVE-2020-7189 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-154 |
ZDI-CAN-8973 |
Hewlett Packard Enterprise |
CVE-2020-7190 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-153 |
ZDI-CAN-8972 |
Hewlett Packard Enterprise |
CVE-2020-7191 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-152 |
ZDI-CAN-8969 |
Hewlett Packard Enterprise |
CVE-2020-7192 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-151 |
ZDI-CAN-8966 |
Hewlett Packard Enterprise |
CVE-2020-7144 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-150 |
ZDI-CAN-8962 |
Hewlett Packard Enterprise |
CVE-2020-7148 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-149 |
ZDI-CAN-8961 |
Hewlett Packard Enterprise |
CVE-2020-7147 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-148 |
ZDI-CAN-8960 |
Hewlett Packard Enterprise |
CVE-2020-7146 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center devGroupSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-147 |
ZDI-CAN-8959 |
Hewlett Packard Enterprise |
CVE-2020-7159 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-146 |
ZDI-CAN-8957 |
Hewlett Packard Enterprise |
CVE-2020-7145 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center choosePerfView Expression Language Injection Remote Code Execution Vulnerability |
ZDI-20-145 |
ZDI-CAN-9401 |
Adobe |
CVE-2019-16451 |
7.8 |
2020-02-03 |
|
Adobe Acrobat Pro DC TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
ZDI-20-144 |
ZDI-CAN-9399 |
Apple |
CVE-2019-8835 |
4.3 |
2020-01-27 |
|
Apple Safari SimpleLineLayout Use-After-Free Information Disclosure Vulnerability |
ZDI-20-143 |
ZDI-CAN-9969 |
Microsoft |
CVE-2020-0635 |
7.8 |
2020-01-17 |
|
Microsoft Windows WIA Junction Privilege Escalation Vulnerability |
ZDI-20-142 |
ZDI-CAN-9797 |
Oracle |
CVE-2020-2727 |
6.0 |
2020-01-15 |
|
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-141 |
ZDI-CAN-9796 |
Oracle |
CVE-2020-2726 |
7.5 |
2020-01-15 |
|
Oracle VirtualBox SCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-140 |
ZDI-CAN-9141 |
Oracle |
CVE-2020-2705 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-139 |
ZDI-CAN-9112 |
Oracle |
CVE-2020-2704 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-138 |
ZDI-CAN-9794 |
Oracle |
CVE-2020-2702 |
7.5 |
2020-01-15 |
|
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-137 |
ZDI-CAN-9763 |
Oracle |
CVE-2020-2701 |
7.5 |
2020-01-15 |
|
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-136 |
ZDI-CAN-9590 |
Oracle |
CVE-2020-2698 |
7.5 |
2020-01-15 |
|
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
ZDI-20-135 |
ZDI-CAN-9457 |
Oracle |
CVE-2020-2693 |
5.3 |
2020-01-15 |
|
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-134 |
ZDI-CAN-9117 |
Oracle |
CVE-2020-2692 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-133 |
ZDI-CAN-9116 |
Oracle |
CVE-2020-2691 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-132 |
ZDI-CAN-9115 |
Oracle |
CVE-2020-2690 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-131 |
ZDI-CAN-9114 |
Oracle |
CVE-2020-2689 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-130 |
ZDI-CAN-9389 |
Oracle |
CVE-2020-2682 |
8.2 |
2020-01-15 |
|
Oracle VirtualBox VBoxVHWAHandleTable Out-Of-Bounds Access Privilege Escalation Vulnerability |
ZDI-20-129 |
ZDI-CAN-9109 |
Oracle |
CVE-2020-2681 |
6.5 |
2020-01-15 |
|
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-128 |
ZDI-CAN-9020 |
Oracle |
CVE-2020-2555 |
9.8 |
2020-01-15 |
|
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
ZDI-20-127 |
ZDI-CAN-9427 |
Microsoft |
CVE-2020-0652 |
7.8 |
2020-01-15 |
|
Microsoft Office Graph Stack-based Buffer Overflow Remote Code Execution Vulnerability |
ZDI-20-126 |
ZDI-CAN-9641 |
Sony |
CVE-2017-5030 |
6.3 |
2020-01-15 |
2020-02-21 |
(Pwn2Own) Sony X800G Smart TV Vewd Out-Of-Bounds Read Remote Code Execution Vulnerability |
ZDI-20-125 |
ZDI-CAN-9382 |
Microsoft |
CVE-2020-0634 |
8.8 |
2020-01-15 |
|
Microsoft Windows CLFS Use-After-Free Privilege Escalation Vulnerability |
ZDI-20-124 |
ZDI-CAN-9377 |
Microsoft |
CVE-2020-0616 |
7.3 |
2020-01-15 |
|
Microsoft Windows Device Management Enrollment Service Hard Link Denial-of-Service Vulnerability |
ZDI-20-123 |
ZDI-CAN-9423 |
Microsoft |
CVE-2020-0615 |
8.4 |
2020-01-15 |
|
Microsoft Windows CLFS Driver Out-Of-Bounds Read Information Disclosure Vulnerability |
ZDI-20-122 |
ZDI-CAN-9421 |
Microsoft |
CVE-2020-0639 |
8.4 |
2020-01-15 |
|
Microsoft Windows CLFS Driver Integer Overflow Information Disclosure Vulnerability |
ZDI-20-121 |
ZDI-CAN-9341 |
Cisco |
CVE-2019-15984 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanSwitchDataLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-120 |
ZDI-CAN-9248 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getTopologyVlanList XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-119 |
ZDI-CAN-9285 |
Cisco |
CVE-2019-15983 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager CablePlans XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-118 |
ZDI-CAN-9469 |
Cisco |
CVE-2019-15980 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getDeployContent Directory Traversal Information Disclosure Vulnerability |
ZDI-20-117 |
ZDI-CAN-9425 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager addGroupNavigation XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-116 |
ZDI-CAN-9353 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager checkLinkUUID SQL Injection Remote Code Execution Vulnerability |
ZDI-20-115 |
ZDI-CAN-9340 |
Cisco |
CVE-2019-15984 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getSwitchsDataLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-114 |
ZDI-CAN-9247 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getInventoryIslList XML External Entity Processing Information Disclosure Vulnerability |
ZDI-20-113 |
ZDI-CAN-9361 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager getSwitchName SQL Injection Remote Code Execution Vulnerability |
ZDI-20-112 |
ZDI-CAN-9360 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getRpmJobLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-111 |
ZDI-CAN-9356 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getConfigTemplateFileName SQL Injection Remote Code Execution Vulnerability |
ZDI-20-110 |
ZDI-CAN-9352 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager getSwitchDbIdBySerialNumber SQL Injection Remote Code Execution Vulnerability |
ZDI-20-109 |
ZDI-CAN-9351 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getGirTaskLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-108 |
ZDI-CAN-9350 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getVpcCount SQL Injection Information Disclosure Vulnerability |
ZDI-20-107 |
ZDI-CAN-9349 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getJobLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-106 |
ZDI-CAN-9348 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getZoneDataLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-105 |
ZDI-CAN-9347 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
|
Cisco Data Center Network Manager getVsanDataLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-104 |
ZDI-CAN-9342 |
Cisco |
CVE-2019-15984 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanSwitchDataLength SQL Injection Information Disclosure Vulnerability |
ZDI-20-103 |
ZDI-CAN-9305 |
Cisco |
CVE-2019-15982 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager AFW Image Upload Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-102 |
ZDI-CAN-9286 |
Cisco |
CVE-2019-15978 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager createLanFabric Command Injection Remote Code Execution Vulnerability |
ZDI-20-101 |
ZDI-CAN-9288 |
Cisco |
CVE-2019-15980 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager writeToFile Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-100 |
ZDI-CAN-9235 |
Cisco |
CVE-2019-15979 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager importTS Command Injection Remote Code Execution Vulnerability |
ZDI-20-099 |
ZDI-CAN-9301 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getDiscoveredDeviceCount groupId SQL Injection Remote Code Execution Vulnerability |
ZDI-20-098 |
ZDI-CAN-9300 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getDiscoveredDeviceCount hostname SQL Injection Remote Code Execution Vulnerability |
ZDI-20-097 |
ZDI-CAN-9289 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getDiscoveredDeviceCount switchIdList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-096 |
ZDI-CAN-9283 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager setVxlanProperties SQL Injection Remote Code Execution Vulnerability |
ZDI-20-095 |
ZDI-CAN-9267 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager createSite SQL Injection Remote Code Execution Vulnerability |
ZDI-20-094 |
ZDI-CAN-9266 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager createSite getIp SQL Injection Remote Code Execution Vulnerability |
ZDI-20-093 |
ZDI-CAN-9234 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager checkDiscoveryEthSwCandidates4List SQL Injection Remote Code Execution Vulnerability |
ZDI-20-092 |
ZDI-CAN-9218 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getN3KBufferStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-091 |
ZDI-CAN-9217 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndDeviceStatListWithVsan SQL Injection Remote Code Execution Vulnerability |
ZDI-20-090 |
ZDI-CAN-9216 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getNpvLinkStatJoinList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-089 |
ZDI-CAN-9215 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getFlowStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-088 |
ZDI-CAN-9214 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getTaskList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-087 |
ZDI-CAN-9210 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager modifyGroupName SQL Injection Remote Code Execution Vulnerability |
ZDI-20-086 |
ZDI-CAN-9209 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-085 |
ZDI-CAN-9208 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-084 |
ZDI-CAN-9207 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVpcCount SQL Injection Remote Code Execution Vulnerability |
ZDI-20-083 |
ZDI-CAN-9203 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-082 |
ZDI-CAN-9202 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-081 |
ZDI-CAN-9201 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getAllVpcs SQL Injection Remote Code Execution Vulnerability |
ZDI-20-080 |
ZDI-CAN-9200 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanEthernetStatListES SQL Injection Remote Code Execution Vulnerability |
ZDI-20-079 |
ZDI-CAN-9199 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanIslStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-078 |
ZDI-CAN-9198 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getPortGroupStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-077 |
ZDI-CAN-9197 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanIslStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-076 |
ZDI-CAN-9196 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getNpvLinkStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-075 |
ZDI-CAN-9195 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanIslStatJoinList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-074 |
ZDI-CAN-9194 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanGigEStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-073 |
ZDI-CAN-9193 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanGigEStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-072 |
ZDI-CAN-9192 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanIslStatJoinList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-071 |
ZDI-CAN-9189 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanSwitchListWithoutUsedPorts SQL Injection Remote Code Execution Vulnerability |
ZDI-20-070 |
ZDI-CAN-9188 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanStatEntities SQL Injection Remote Code Execution Vulnerability |
ZDI-20-069 |
ZDI-CAN-9187 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanStatEntities SQL Injection Remote Code Execution Vulnerability |
ZDI-20-068 |
ZDI-CAN-9186 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getOidSanStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-067 |
ZDI-CAN-9185 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getOidLanStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-066 |
ZDI-CAN-9180 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getPortGroupMember SQL Injection Remote Code Execution Vulnerability |
ZDI-20-065 |
ZDI-CAN-9170 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-064 |
ZDI-CAN-9169 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanZoneList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-063 |
ZDI-CAN-9168 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVsanList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-062 |
ZDI-CAN-9167 |
Cisco |
CVE-2019-15985 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndPortConnectionsForStorageSystem SQL Injection Remote Code Execution Vulnerability |
ZDI-20-061 |
ZDI-CAN-9166 |
Cisco |
CVE-2019-15985 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndPortConnectionsForStorageEnclosure SQL Injection Remote Code Execution Vulnerability |
ZDI-20-060 |
ZDI-CAN-9165 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVmHostData SQL Injection Remote Code Execution Vulnerability |
ZDI-20-059 |
ZDI-CAN-9127 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getDeployerTaskDetails SQL Injection Remote Code Execution Vulnerability |
ZDI-20-058 |
ZDI-CAN-9124 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getJobList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-057 |
ZDI-CAN-9164 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVsanListForEnclosures SQL Injection Remote Code Execution Vulnerability |
ZDI-20-056 |
ZDI-CAN-9163 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getAllGroups SQL Injection Remote Code Execution Vulnerability |
ZDI-20-055 |
ZDI-CAN-9134 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getZoneListByZoneNameAndParentId SQL Injection Remote Code Execution Vulnerability |
ZDI-20-054 |
ZDI-CAN-9129 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanIslListWithPM SQL Injection Remote Code Execution Vulnerability |
ZDI-20-053 |
ZDI-CAN-9128 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndDeviceList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-052 |
ZDI-CAN-9060 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability |
ZDI-20-051 |
ZDI-CAN-9068 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability |
ZDI-20-050 |
ZDI-CAN-9058 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getModulesBySwitch SQL Injection Remote Code Execution Vulnerability |
ZDI-20-049 |
ZDI-CAN-9224 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanIslStatListES SQL Injection Remote Code Execution Vulnerability |
ZDI-20-048 |
ZDI-CAN-9057 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getModules SQL Injection Remote Code Execution Vulnerability |
ZDI-20-047 |
ZDI-CAN-9059 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getNpvLinks SQL Injection Remote Code Execution Vulnerability |
ZDI-20-046 |
ZDI-CAN-9125 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getBackupStatusCount SQL Injection Remote Code Execution Vulnerability |
ZDI-20-045 |
ZDI-CAN-9225 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanIslStatListESBySQL SQL Injection Remote Code Execution Vulnerability |
ZDI-20-044 |
ZDI-CAN-9223 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getFlowStatListES SQL Injection Remote Code Execution Vulnerability |
ZDI-20-043 |
ZDI-CAN-9220 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSanGigEStatListES SQL Injection Remote Code Execution Vulnerability |
ZDI-20-042 |
ZDI-CAN-9219 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getCustomPGStatList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-041 |
ZDI-CAN-9222 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndDeviceStatListESBySQL SQL Injection Remote Code Execution Vulnerability |
ZDI-20-040 |
ZDI-CAN-9221 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getIslListWithPMForTopology SQL Injection Remote Code Execution Vulnerability |
ZDI-20-039 |
ZDI-CAN-9181 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-038 |
ZDI-CAN-9182 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanSwitchList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-037 |
ZDI-CAN-9184 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLanIslList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-036 |
ZDI-CAN-9074 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getisls SQL Injection Remote Code Execution Vulnerability |
ZDI-20-035 |
ZDI-CAN-9073 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getInterfacesBySwitch SQL Injection Remote Code Execution Vulnerability |
ZDI-20-034 |
ZDI-CAN-9072 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-033 |
ZDI-CAN-9067 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-032 |
ZDI-CAN-9065 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getEndPorts SQL Injection Remote Code Execution Vulnerability |
ZDI-20-031 |
ZDI-CAN-9061 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getLicenses SQL Injection Remote Code Execution Vulnerability |
ZDI-20-030 |
ZDI-CAN-9064 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getAllTemplate SQL Injection Remote Code Execution Vulnerability |
ZDI-20-029 |
ZDI-CAN-9063 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getRPMTasks SQL Injection Remote Code Execution Vulnerability |
ZDI-20-028 |
ZDI-CAN-9040 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getJobExecutionDetails SQL Injection Remote Code Execution Vulnerability |
ZDI-20-027 |
ZDI-CAN-9062 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager DeviceModuleRest getDeviceModulesupport SQL Injection Remote Code Execution Vulnerability |
ZDI-20-026 |
ZDI-CAN-9070 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getSyslogEventList SQL Injection Remote Code Execution Vulnerability |
ZDI-20-025 |
ZDI-CAN-9053 |
Cisco |
CVE-2019-15984 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager VirtualPortChannel getDomain SQL Injection Information Disclosure Vulnerability |
ZDI-20-024 |
ZDI-CAN-9069 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getHostEnclDataLength SQL Injection Remote Code Execution Vulnerability |
ZDI-20-023 |
ZDI-CAN-9052 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVpcPeerHistory SQL Injection Remote Code Execution Vulnerability |
ZDI-20-022 |
ZDI-CAN-9051 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager getVpcHistory SQL Injection Remote Code Execution Vulnerability |
ZDI-20-021 |
ZDI-CAN-9050 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager getAllVpc SQL Injection Remote Code Execution Vulnerability |
ZDI-20-020 |
ZDI-CAN-9043 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager deleteVpcHistory SQL Injection Remote Code Execution Vulnerability |
ZDI-20-019 |
ZDI-CAN-9042 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager getSMUTasks SQL Injection Remote Code Execution Vulnerability |
ZDI-20-018 |
ZDI-CAN-9041 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager ImageManagement SQL Injection Remote Code Execution Vulnerability |
ZDI-20-017 |
ZDI-CAN-9030 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager getTokenInfo SQL Injection Remote Code Execution Vulnerability |
ZDI-20-016 |
ZDI-CAN-9029 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
|
Cisco Data Center Network Manager persistUserInfo SQL Injection Remote Code Execution Vulnerability |
ZDI-20-015 |
ZDI-CAN-9139 |
Cisco |
CVE-2019-15981 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager readConfigFileFromDB Directory Traversal Information Disclosure Vulnerability |
ZDI-20-014 |
ZDI-CAN-9130 |
Cisco |
CVE-2019-15981 |
7.1 |
2020-01-03 |
|
Cisco Data Center Network Manager ReportWS deleteReportTemplate Directory Traversal Denial-of-Service Vulnerability |
ZDI-20-013 |
ZDI-CAN-9038 |
Cisco |
CVE-2019-15977 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager JBoss_4_2Encrypter Hardcoded Cryptographic Key Information Disclosure Vulnerability |
ZDI-20-012 |
ZDI-CAN-9037 |
Cisco |
CVE-2019-15977 |
7.5 |
2020-01-03 |
|
Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability |
ZDI-20-011 |
ZDI-CAN-9025 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager DbAdminRest installSwitchLicense Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-010 |
ZDI-CAN-9158 |
Cisco |
CVE-2019-15981 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager readConfigFileFromDBAsXML Directory Traversal Information Disclosure Vulnerability |
ZDI-20-009 |
ZDI-CAN-9157 |
Cisco |
CVE-2019-15981 |
7.1 |
2020-01-03 |
|
Cisco Data Center Network Manager WebAnalysisWSService storeConfigToFS Directory Traversal Denial-of-Service Vulnerability |
ZDI-20-008 |
ZDI-CAN-9140 |
Cisco |
CVE-2019-15976 |
9.8 |
2020-01-03 |
|
Cisco Data Center Network Manager SecurityManager Hard-coded Cryptographic Key Authentication Bypass Vulnerability |
ZDI-20-007 |
ZDI-CAN-9035 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager reportTemplateUploadPolicy Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-006 |
ZDI-CAN-9027 |
Cisco |
CVE-2019-15980 |
6.5 |
2020-01-03 |
|
Cisco Data Center Network Manager ConfigArchiveRest getRestoreLog Directory Traversal Information Disclosure Vulnerability |
ZDI-20-005 |
ZDI-CAN-9026 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager DbAdminRest runZoneMigrationForBrocade Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-004 |
ZDI-CAN-9024 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
|
Cisco Data Center Network Manager DbAdminRest saveLicenseFileToServer Directory Traversal Remote Code Execution Vulnerability |
ZDI-20-003 |
ZDI-CAN-9021 |
Cisco |
CVE-2019-15975 |
9.8 |
2020-01-03 |
|
Cisco Data Center Network Manager TrustedClientTokenValidator Hard-coded Cryptographic Key Authentication Bypass Vulnerability |
ZDI-20-002 |
ZDI-CAN-9608 |
Microsoft |
|
3.1 |
2020-01-02 |
|
(0Day) Microsoft Outlook HTML Uninitialized Memory Information Disclosure Vulnerability |
ZDI-20-001 |
ZDI-CAN-8185 |
Microsoft |
|
4.3 |
2020-01-02 |
|
(0Day) Microsoft Windows Media Player Mpeg Audio Codec Out-Of-Bounds Read Information Disclosure Vulnerability |