| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-7537 | Hig | 0.49 | 7.5 | 0.01 | Dec 11, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially… | ||
| CVE-2020-7536 | Hig | 0.49 | 7.5 | 0.01 | Dec 11, 2020 | A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all… | ||
| CVE-2020-7535 | Hig | 0.49 | 7.5 | 0.01 | Dec 11, 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification… | ||
| CVE-2020-28219 | Hig | 0.51 | 7.8 | 0.00 | Dec 11, 2020 | A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly Updates to September 2020, from 81.7268.1 to 81.7578.1) and EcoStruxure Geo SCADA Expert 2020 (Original release and Monthly Updates to… | ||
| CVE-2020-28217 | Hig | 0.49 | 7.5 | 0.01 | Dec 11, 2020 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol. | ||
| CVE-2020-28216 | Hig | 0.49 | 7.5 | 0.01 | Dec 11, 2020 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol. | ||
| CVE-2020-4829 | Hig | 0.51 | 7.8 | 0.00 | Dec 10, 2020 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960. | ||
| CVE-2020-26269 | Hig | 0.42 | 7.5 | 0.01 | Dec 10, 2020 | In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the… | ||
| CVE-2020-25967 | Hig | 0.57 | 8.8 | 0.01 | Dec 10, 2020 | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability. | ||
| CVE-2020-13526 | Hig | 0.57 | 8.8 | 0.02 | Dec 10, 2020 | SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTables_Ajax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make… | ||
| CVE-2020-12594 | Hig | 0.47 | 7.2 | 0.02 | Dec 10, 2020 | A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4. | ||
| CVE-2020-12516 | Hig | 0.49 | 7.5 | 0.02 | Dec 10, 2020 | Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. | ||
| CVE-2020-17159 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability | ||
| CVE-2020-17158 | Hig | 0.57 | 8.8 | 0.03 | Dec 10, 2020 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | ||
| CVE-2020-17156 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2020-17152 | Hig | 0.57 | 8.8 | 0.03 | Dec 10, 2020 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | ||
| CVE-2020-17150 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2020-17148 | Hig | 0.51 | 7.8 | 0.04 | Dec 10, 2020 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | ||
| CVE-2020-17147 | Hig | 0.57 | 8.7 | 0.01 | Dec 10, 2020 | Dynamics CRM Webclient Cross-site Scripting Vulnerability | ||
| CVE-2020-17144 | Hig | 0.70 | 8.4 | 0.37 | KEV | Dec 10, 2020 | Microsoft Exchange Remote Code Execution Vulnerability | |
| CVE-2020-17143 | Hig | 0.63 | 8.8 | 0.71 | Dec 10, 2020 | Microsoft Exchange Server Information Disclosure Vulnerability | ||
| CVE-2020-17141 | Hig | 0.55 | 8.4 | 0.07 | Dec 10, 2020 | Microsoft Exchange Remote Code Execution Vulnerability | ||
| CVE-2020-17140 | Hig | 0.54 | 8.1 | 0.15 | Dec 10, 2020 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2020-17139 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Overlay Filter Security Feature Bypass Vulnerability | ||
| CVE-2020-17137 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | ||
| CVE-2020-17136 | Hig | 0.55 | 7.8 | 0.14 | Dec 10, 2020 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2020-17134 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2020-17129 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17128 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17127 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17125 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17124 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft PowerPoint Remote Code Execution Vulnerability | ||
| CVE-2020-17123 | Hig | 0.51 | 7.8 | 0.04 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17122 | Hig | 0.51 | 7.8 | 0.04 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2020-17121 | Hig | 0.57 | 8.8 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Remote Code Execution Vulnerability | ||
| CVE-2020-17118 | Hig | 0.53 | 8.1 | 0.04 | Dec 10, 2020 | Microsoft SharePoint Remote Code Execution Vulnerability | ||
| CVE-2020-17115 | Hig | 0.52 | 8.0 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2020-17103 | Hig | 0.47 | 7.0 | 0.24 | Dec 10, 2020 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2020-17096 | Hig | 0.50 | 7.5 | 0.20 | Dec 10, 2020 | Windows NTFS Remote Code Execution Vulnerability | ||
| CVE-2020-17095 | Hig | 0.56 | 8.5 | 0.05 | Dec 10, 2020 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2020-17092 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Network Connections Service Elevation of Privilege Vulnerability | ||
| CVE-2020-17089 | Hig | 0.46 | 7.1 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Elevation of Privilege Vulnerability | ||
| CVE-2020-17002 | Hig | 0.48 | 7.4 | 0.03 | Dec 10, 2020 | Azure SDK for C Security Feature Bypass Vulnerability | ||
| CVE-2020-16971 | Hig | 0.48 | 7.4 | 0.04 | Dec 10, 2020 | Azure SDK for Java Security Feature Bypass Vulnerability | ||
| CVE-2020-16964 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability | ||
| CVE-2020-16963 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability | ||
| CVE-2020-16962 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability | ||
| CVE-2020-16961 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability | ||
| CVE-2020-16960 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability | ||
| CVE-2020-16959 | Hig | 0.51 | 7.8 | 0.01 | Dec 10, 2020 | Windows Backup Engine Elevation of Privilege Vulnerability |
- risk 0.49cvss 7.5epss 0.01
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially…
- risk 0.49cvss 7.5epss 0.01
A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all…
- risk 0.49cvss 7.5epss 0.01
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification…
- risk 0.51cvss 7.8epss 0.00
A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly Updates to September 2020, from 81.7268.1 to 81.7578.1) and EcoStruxure Geo SCADA Expert 2020 (Original release and Monthly Updates to…
- risk 0.49cvss 7.5epss 0.01
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.
- risk 0.49cvss 7.5epss 0.01
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.
- risk 0.51cvss 7.8epss 0.00
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960.
- risk 0.42cvss 7.5epss 0.01
In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the…
- risk 0.57cvss 8.8epss 0.01
The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
- risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTables_Ajax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make…
- risk 0.47cvss 7.2epss 0.02
A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4.
- risk 0.49cvss 7.5epss 0.02
Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
- risk 0.57cvss 8.7epss 0.01
Dynamics CRM Webclient Cross-site Scripting Vulnerability
- risk 0.70cvss 8.4epss 0.37
Microsoft Exchange Remote Code Execution Vulnerability
- risk 0.63cvss 8.8epss 0.71
Microsoft Exchange Server Information Disclosure Vulnerability
- risk 0.55cvss 8.4epss 0.07
Microsoft Exchange Remote Code Execution Vulnerability
- risk 0.54cvss 8.1epss 0.15
Windows SMB Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Overlay Filter Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.01
DirectX Graphics Kernel Elevation of Privilege Vulnerability
- risk 0.55cvss 7.8epss 0.14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft PowerPoint Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.04
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.03
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.47cvss 7.0epss 0.24
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.50cvss 7.5epss 0.20
Windows NTFS Remote Code Execution Vulnerability
- risk 0.56cvss 8.5epss 0.05
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Network Connections Service Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.03
Microsoft SharePoint Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.03
Azure SDK for C Security Feature Bypass Vulnerability
- risk 0.48cvss 7.4epss 0.04
Azure SDK for Java Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Backup Engine Elevation of Privilege Vulnerability