Exploited and new serious CVEs: August 2020

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and applic

• Pre-auth
• Memory safety
• Denial of service

acti · nvrAug 4, 2020

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as

• pre-auth RCE
• Command injection

aerospike · aerospike serverAug 5, 2020

**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.

• Pre-auth
• SQL injection

apache · skywalkingAug 5, 2020

GOG Galaxy GalaxyClientService Privilege Escalation

• Local privilege escalation

gog · galaxyAug 6, 2020

Cayin xPost SQL Injection

• Pre-auth
• SQL injection

cayintech · xpostAug 6, 2020

Cayin CMS Command Injection

• RCE
• Hard-coded credentials
• Command injection

cayintech · cms-se firmwareAug 6, 2020

ZenTao Pro Command Injection

• RCE
• Command injection

easycorp · zentao proAug 6, 2020

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

• pre-auth RCE
• Memory safety

apache · http serverAug 7, 2020

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, loggin

• Pre-auth
• Denial of service

apache · http serverAug 7, 2020

Apache HTTP Server versions 2.4.20 to 2.4.43.

• Pre-auth
• Denial of service

apache · http serverAug 7, 2020

Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard

vmware · spring cloud netflixAug 7, 2020

Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.

• Pre-auth
• Auth bypass

turcom · trcwifizoneAug 11, 2020

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel

• pre-auth RCE

vbulletin · vbulletinAug 12, 2020

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site

• XSS

jenkins · jenkinsAug 12, 2020

Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.

• RCE
• Command injection

articatech · web proxyAug 12, 2020

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQ

• Pre-auth
• SQL injection

articatech · web proxyAug 12, 2020

Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

• RCE
• Memory safety

documalis · free pdf editorAug 12, 2020

A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials

• Pre-auth

cisco · unified ip conference station 7937g firmwareAug 12, 2020

A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the devi

• Pre-auth
• Denial of service

cisco · unified ip conference station 7937g firmwareAug 12, 2020

A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely throug

• Pre-auth
• Denial of service

cisco · unified ip conference station 7937g firmwareAug 12, 2020

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

• Pre-auth
• SQL injection

thedaylightstudio · fuel cmsAug 13, 2020

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1

• RCE
• Command injection

geutebrueck · g-cam ebc-2110 firmwareAug 14, 2020

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information

• Pre-auth
• Auth bypass

fortinet · fortiosAug 14, 2020

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10

• Pre-auth
• Path traversal

citrix · xenmobile serverAug 17, 2020

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

• RCE
• Local privilege escalation

cisco · anyconnect secure mobility clientAug 17, 2020

Windows Print Spooler Elevation of Privilege Vulnerability

• RCE
• Local privilege escalation
• Race condition

microsoft · windows 10Aug 17, 2020

Scripting Engine Memory Corruption Vulnerability

• RCE
• Memory safety

microsoft · internet explorerAug 17, 2020

Windows Spoofing Vulnerability

• Weak crypto

microsoft · windows 10 1507Aug 17, 2020

Netlogon Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows server 1903Aug 17, 2020

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

• Pre-auth
• Auth bypass

apache · shiroAug 17, 2020

An issue was discovered in RiteCMS 2.2.1.

• RCE
• Command injection

ritecms · ritecmsAug 18, 2020

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav

• RCE
• Memory safety

adobe · acrobat dcAug 19, 2020

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.

• pre-auth RCE
• Command injection

seowonintech · slc-130 firmwareAug 19, 2020

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".

• Pre-auth
• Auth bypass
• SQL injection

kabir-m-alhasan · student management systemAug 20, 2020

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.

• Pre-auth
• Path traversal

nexusdb · nexusdbAug 21, 2020

ALEOS LAN-Side RPC Server

• Pre-auth

sierrawireless · aleosAug 21, 2020

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.

• Pre-auth
• XXE

wso2 · api managerAug 21, 2020

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files ou

• Path traversal

nextcloud · desktopAug 21, 2020

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated u

• pre-auth RCE
• File upload

gvectors · wpdiscuzAug 24, 2020

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.

• Pre-auth
• SQL injection

os4ed · opensisAug 24, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

• pre-auth RCE
• Path traversal

marvell · qconvergeconsoleAug 25, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

• RCE
• Path traversal

marvell · qconvergeconsoleAug 25, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

• RCE
• File upload

marvell · qconvergeconsoleAug 25, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

• RCE
• Path traversal

marvell · qconvergeconsoleAug 25, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

• RCE
• Path traversal

marvell · qconvergeconsoleAug 25, 2020

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file.

• Pre-auth

filemanagerpro · file managerAug 26, 2020

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application a

• Pre-auth
• File upload

gmapfp · gmapfpAug 27, 2020

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

• Pre-auth
• Denial of service

cisco · ios xrAug 29, 2020

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

• Pre-auth
• XSS

mara cms project · mara cmsAug 30, 2020

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService

• Pre-auth
• Auth bypass

zohocorp · manageengine adselfservice plusAug 31, 2020

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request

• Pre-auth
• Auth bypass

tp-link · tl-wa855re firmwareAug 31, 2020