آسیبپذیریهای حیاتی هفته اول آذرماه
این هفته آسیبپذیریهای «حیاتی» و «پرخطر» بسیاری در محصولات مهم Cisco گزارش و وصله‌ها و به‌روزرسانی‌هایی به منظور رفع آن‌ها ارائه شد. همچنین در محصولات شرکت‌های IBM، MongoDB، Nextcloud، Schneider Electric، TP-LINK، VMware و کرنل لینوکس چندین آسیب‌پذیری «حیاتی» و «پرخطر» وجود داشت.
لیست این آسیب‌پذیری‌ها به همراه لینک وصله‌ها و به‌روزرسانی‌های ارائه‌شده در جدول زیر آمده است.
|
شناسه آسیب‌پذیری |
امتیاز مبنا |
عنوان آسیب‌پذیری |
ارزش روز صفر |
CTI |
رفع آسیب‌پذیری |
|
CVE-2020-26510 |
۷.۳ |
Airleader Master Tomcat Manager hard-coded credentials |
$۱k-$2k |
۰.۴۱ |
Not Defined |
|
CVE-2020-26509 |
۴.۳ |
Airleader Master/Easy hard-coded credentials |
$۱k-$2k |
۰.۴۳ |
Not Defined |
|
CVE-2020-8897 |
۴.۸ |
Amazon AWS Encryption SDK AES-GCM cryptographic issues |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-27423 |
۳.۵ |
Anuko Time Tracker Password Reset denial of service |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-27422 |
۵.۶ |
Anuko Time Tracker weak password recovery |
$۲k-$5k |
۰.۰۰ |
Not Defined |
|
CVE-2020-28949 |
۵.۵ |
Archive_Tar Filename unknown vulnerability |
$۲k-$5k |
۰.۴۲ |
Not Defined |
|
CVE-2020-28948 |
۵.۵ |
Archive_Tar PHAR deserialization |
$۱k-$2k |
۰.۳۴ |
Not Defined |
|
CVE-2020-28688 |
۶.۳ |
Artworks Gallery in PHP, CSS, JavaScript, and MySQL Artwork unrestricted upload |
$۲k-$5k |
۰.۰۶ |
Not Defined |
|
CVE-2020-28687 |
۶.۳ |
Artworks Gallery in PHP, CSS, JavaScript, and MySQL unrestricted upload |
$۲k-$5k |
۰.۰۷ |
Not Defined |
|
CVE-2020-26549 |
۵.۵ |
Aviatrix Controller .htaccess protection mechanism failure |
$۱k-$2k |
۰.۳۳ |
|
|
CVE-2020-26552 |
۶.۳ |
Aviatrix Controller API Endpoint improper authentication |
$۱k-$2k |
۰.۰۶ |
|
|
CVE-2020-26553 |
۵.۵ |
Aviatrix Controller API unrestricted upload |
$۱k-$2k |
۰.۰۶ |
|
|
CVE-2020-26551 |
۲.۶ |
Aviatrix Controller credentials storage |
$۱k-$2k |
۰.۰۶ |
|
|
CVE-2020-26550 |
۳.۱ |
Aviatrix Controller Encrypted File insufficiently protected credentials |
$۰-$۱k |
۰.۱۲ |
|
|
CVE-2020-26548 |
۸.۸ |
Aviatrix Controller sudo access control |
$۲k-$5k |
۰.۴۱ |
|
|
CVE-2020-23489 |
۶.۳ |
Avideo import.json.php access control |
$۲k-$5k |
۰.۰۵ |
|
|
CVE-2020-23490 |
۴.۰ |
AVideo information disclosure |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-28329 |
۷.۳ |
Barco wePresent Service Port 4001 hard-coded credentials |
$۰-$۵k |
۱۰.۰۰- |
|
|
CVE-2020-28333 |
۷.۳ |
Barco wePresent WiPG-1600W authentication bypass |
$۰-$۵k |
۰.۳۴+ |
|
|
CVE-2020-28330 |
۴.۳ |
Barco wePresent WiPG-1600W cleartext storage |
$۰-$۵k |
۱۰.۰۰- |
|
|
CVE-2020-28332 |
۸.۸ |
Barco wePresent WiPG-1600W Firmware Update improper validation of integrity check value |
$۰-$۵k |
۰.۰۰+ |
|
|
CVE-2020-28334 |
۹.۸ |
Barco wePresent WiPG-1600W SSH hard-coded credentials |
$۰-$۵k |
۰.۰۰+ |
|
|
CVE-2020-28331 |
۶.۳ |
Barco wePresent WiPG-1600W Web UI return.cgi access control |
$۰-$۵k |
۰.۴۲+ |
|
|
CVE-2020-27554 |
۳.۷ |
BASETech GE-131 BT-1837836 missing encryption |
$۰-$۱k |
۰.۰۶ |
Not Defined |
|
CVE-2020-27553 |
۵.۳ |
BASETech GE-131 BT-1837836 pathname traversal |
$۱k-$2k |
۰.۰۶ |
Not Defined |
|
CVE-2020-27556 |
۵.۶ |
BASETech GE-131 BT-1837836 Remote Code Execution |
$۲k-$5k |
۰.۰۰ |
Not Defined |
|
CVE-2020-27555 |
۹.۸ |
BASETech GE-131 BT-1837836 Telnet Server hard-coded credentials |
$۲k-$5k |
۱.۲۶ |
Not Defined |
|
CVE-2020-27558 |
۵.۳ |
BASETech GE-131 BT-1837836 Video Stream information disclosure |
$۱k-$2k |
۰.۰۰ |
Not Defined |
|
CVE-2020-27557 |
۳.۳ |
BASETech GE-131 BT-1837836 Video Stream information disclosure |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-22723 |
۳.۵ |
Beijing Liangjing Zhicheng ljcmsshop user.php cross site scripting |
$۰-$۱k |
۰.۰۷ |
Not Defined |
|
CVE-2020-28954 |
۵.۵ |
BigBlueButton Control Character ApiController.groovy unknown vulnerability |
$۰-$۵k |
۰.۳۳ |
|
|
CVE-2020-28953 |
۳.۵ |
BigBlueButton Poll unknown vulnerability |
$۰-$۵k |
۰.۴۰ |
|
|
CVE-2020-15349 |
۵.۳ |
BinaryNights ForkLift Helper Tool access control |
$۱k-$2k |
۰.۰۸ |
|
|
CVE-2020-27192 |
۵.۳ |
BinaryNights ForkLift injection |
$۱k-$2k |
۰.۱۷ |
Not Defined |
|
CVE-2020-27459 |
۶.۱ |
Chronoforeum Post cross site scripting |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-3586 |
۹.۴ |
Cisco DNA Spaces Connector Web-based Management Interface os command injection |
$۱۰k-$25k |
۰.۵۷ |
|
|
CVE-2020-3482 |
۶.۵ |
Cisco Expressway Software TURN Server access control |
$۱۰k-$25k |
۰.۳۲ |
|
|
CVE-2020-3470 |
۹.۸ |
Cisco Integrated Management Controller API Subsystem memory corruption |
$۲۵k-$50k |
۲.۰۸ |
|
|
CVE-2020-26077 |
۵.۰ |
Cisco IoT Field Network Director access control |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-26076 |
۵.۳ |
Cisco IoT Field Network Director access control |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-26078 |
۴.۹ |
Cisco IoT Field Network Director API file inclusion |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-3392 |
۷.۵ |
Cisco IoT Field Network Director API missing authentication |
$۱۰k-$25k |
۰.۲۰ |
|
|
CVE-2020-26079 |
۴.۱ |
Cisco IoT Field Network Director credentials storage |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-26080 |
۴.۱ |
Cisco IoT Field Network Director JSON access control |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-3531 |
۹.۸ |
Cisco IoT Field Network Director REST API missing authentication |
$۱۰k-$25k |
۰.۴۹ |
|
|
CVE-2020-26075 |
۶.۳ |
Cisco IoT Field Network Director REST API sql injection |
$۱۰k-$25k |
۰.۰۸ |
|
|
CVE-2020-26072 |
۸.۷ |
Cisco IoT Field Network Director SOAP API access control |
$۱۰k-$25k |
۰.۱۷ |
|
|
CVE-2020-26081 |
۶.۱ |
Cisco IoT Field Network Director Web UI cross site scripting |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-3367 |
۵.۳ |
Cisco Secure Web Appliance Log Subscription Subsystem os command injection |
$۵k-$10k |
۰.۱۴ |
|
|
CVE-2020-27125 |
۷.۴ |
Cisco Security Manager input validation |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-27130 |
۹.۱ |
Cisco Security Manager pathname traversal |
$۱۰k-$25k |
۰.۰۷ |
|
|
CVE-2020-27131 |
۸.۱ |
Cisco Security Manager Serialized Java Object deserialization |
$۱۰k-$25k |
۰.۰۸ |
|
|
CVE-2020-26068 |
۵.۵ |
Cisco TelePresence Collaboration Endpoint/RoomOS xAPI service authorization |
$۱۰k-$25k |
۰.۱۷ |
|
|
CVE-2020-27126 |
۶.۱ |
Cisco Webex Meeting API cross site scriting |
$۵k-$10k |
۰.۰۷ |
|
|
CVE-2020-3419 |
۶.۵ |
Cisco Webex Meetings/WebEx Meetings Server Authentication Token dynamically-managed code resources |
$۱۰k-$25k |
۰.۴۱ |
|
|
CVE-2020-3471 |
۶.۵ |
Cisco Webex Meetings/WebEx Meetings Server Connection input validation |
$۱۰k-$25k |
۰.۳۳ |
|
|
CVE-2020-3441 |
۵.۳ |
Cisco Webex Meetings/WebEx Meetings Server Meeting Room Lobby information disclosure |
$۵k-$10k |
۰.۴۸ |
|
|
CVE-2020-11829 |
۵.۵ |
com.coloros.codebook Backup/Restore SDK unknown vulnerability |
$۲k-$5k |
۰.۲۵ |
Not Defined |
|
CVE-2020-11831 |
۵.۵ |
com.oppo.ovoicemanager permission |
$۱k-$2k |
۰.۱۷ |
Not Defined |
|
CVE-2020-11830 |
۵.۵ |
com.oppo.qualityprotect unknown vulnerability |
$۲k-$5k |
۰.۴۲ |
Not Defined |
|
CVE-2019-19560 |
۳.۹ |
Daimler Mercedes HERMES Debug Interface improper authentication |
$۰-$۱k |
۰.۰۵ |
Not Defined |
|
CVE-2019-19556 |
۴.۳ |
Daimler Mercedes HERMES Debug Interface improper authentication |
$۰-$۱k |
۰.۰۶ |
Not Defined |
|
CVE-2019-19563 |
۲.۰ |
Daimler Mercedes HERMES Debug Interface information disclosure |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2019-19561 |
۲.۰ |
Daimler Mercedes HERMES Debug Interface information disclosure |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2019-19557 |
۲.۰ |
Daimler Mercedes HERMES Debug Interface information disclosure |
$۰-$۱k |
۰.۰۶ |
Not Defined |
|
CVE-2019-19562 |
۳.۹ |
Daimler Mercedes HERMES improper authentication |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-7772 |
۷.۵ |
doc-path denial of service |
$۰-$۱k |
۰.۰۸ |
|
|
CVE-2020-13671 |
۵.۵ |
Drupal File unrestricted upload |
$۰-$۵k |
۲.۷۷ |
|
|
CVE-2020-12496 |
۶.۵ |
Endress+Hauser Ecograph T information disclosure |
$۱k-$2k |
۰.۱۷ |
Not Defined |
|
CVE-2020-12495 |
۹.۱ |
Endress+Hauser Ecograph T Web-based User Interface Private privileges management |
$۲k-$5k |
۰.۱۶ |
|
|
CVE-2020-5947 |
۶.۳ |
F5 BIG-IP/BIG-IP Virtual Edition TCP Sequence Number random values |
$۵k-$10k |
۰.۵۸ |
|
|
CVE-2020-27483 |
۶.۳ |
GARMIN Forerunner 235 ConnectIQ TVM array index |
$۲k-$5k |
۰.۰۵ |
|
|
CVE-2020-27486 |
۵.۵ |
GARMIN Forerunner 235 ConnectIQ TVM buffer overflow |
$۲k-$5k |
۰.۴۱ |
|
|
CVE-2020-27485 |
۵.۵ |
GARMIN Forerunner 235 ConnectIQ TVM use after free |
$۲k-$5k |
۰.۱۰ |
|
|
CVE-2020-27484 |
۵.۵ |
GARMIN Forerunner 235 ConnectIQ TVM write integer overflow |
$۲k-$5k |
۰.۰۴ |
|
|
CVE-2020-13350 |
۳.۱ |
GitLab Community Edition/Enterprise Edition Administration Page cross-site request forgery |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-13354 |
۴.۳ |
GitLab Community Edition/Enterprise Edition Container Registry resource consumption |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-13358 |
۴.۷ |
GitLab Community Edition/Enterprise Edition Kubernetes Agent API access control |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-13355 |
۷.۵ |
GitLab Community Edition/Enterprise Edition LFS Upload EE path traversal |
$۱k-$2k |
۰.۱۵ |
|
|
CVE-2020-13356 |
۸.۲ |
GitLab Community Edition/Enterprise Edition Multipart Protection information disclosure |
$۱k-$2k |
۰.۰۰ |
|
|
CVE-2020-26405 |
۷.۱ |
GitLab Community Edition/Enterprise Edition Package Upload path traversal |
$۱k-$2k |
۰.۰۷ |
|
|
CVE-2020-13352 |
۳.۷ |
GitLab Community Edition/Enterprise Edition Project EE information disclosure |
$۱k-$2k |
۰.۰۷ |
|
|
CVE-2020-13359 |
۷.۶ |
GitLab Community Edition/Enterprise Edition Project Maintainer state issue |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-13351 |
۶.۵ |
GitLab Community Edition/Enterprise Edition Scheduled Pipeline API permission |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-13349 |
۴.۳ |
GitLab Enterprise Edition Advanced Search incorrect regex |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-13348 |
۵.۷ |
GitLab Enterprise Edition Branch access control |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-26406 |
۵.۳ |
GitLab Enterprise Edition Private Project information disclosure |
$۱k-$2k |
۰.۰۷ |
|
|
CVE-2020-13360 |
۴.۳ |
GitLab Enterprise Edition Schedule denial of service |
$۰-$۱k |
۰.۰۷ |
Official Fix |
|
CVE-2020-28367 |
۹.۸ |
Google Go argument injection |
$۱۰k-$25k |
۰.۱۷ |
|
|
CVE-2020-28362 |
۷.۵ |
Google Go certificate validation |
$۵k-$10k |
۰.۰۸ |
|
|
CVE-2020-28366 |
۹.۸ |
Google Go code injection |
$۱۰k-$25k |
۰.۰۸ |
|
|
CVE-2020-14234 |
۳.۵ |
HCL Domino denial of service |
$۰-$۵k |
۲.۱۸ |
|
|
CVE-2020-14230 |
۵.۳ |
HCL Domino Email Message denial of service |
$۰-$۵k |
۲.۱۸ |
|
|
CVE-2020-14258 |
۵.۳ |
HCL Notes Email Message denial of service |
$۰-$۵k |
۳.۲۸ |
Not Defined |
|
CVE-2020-28693 |
۶.۳ |
HorizontCMS Theme <php_file_name> unrestricted upload |
$۲k-$5k |
۰.۰۹ |
Not Defined |
|
CVE-2020-4672 |
۵.۴ |
IBM Business Automation Workflow Web UI cross site scripting |
$۲k-$5k |
۰.۰۵ |
|
|
CVE-2020-4739 |
۷.۸ |
IBM DB2 Accessories Suite/DB2/DB2 Connect Server untrusted search path |
$۵k-$25k |
۱.۵۹ |
|
|
CVE-2020-4701 |
۸.۴ |
IBM DB2/DB2 Connect Server buffer overflow |
$۱۰k-$25k |
۰.۳۴ |
|
|
CVE-2020-4718 |
۶.۴ |
IBM Jazz Reporting Service Web UI cross site scripting |
$۲k-$5k |
۰.۳۳ |
|
|
CVE-2020-4592 |
۵.۳ |
IBM MQ Appliance Segmented Message denial of service |
$۲k-$5k |
۰.۲۰ |
|
|
CVE-2020-4788 |
۵.۱ |
IBM Power9 L1 Cache information disclosure |
$۰-$۵k |
۱.۰۱ |
|
|
CVE-2020-4771 |
۵.۳ |
IBM Spectrum Protect Operations Center WebSocket Event improper authentication |
$۵k-$10k |
۱.۹۴ |
|
|
CVE-2020-4783 |
۵.۹ |
IBM Spectrum Protect Plus channel accessible |
$۱۰k-$25k |
۲.۰۵ |
|
|
CVE-2020-4854 |
۹.۸ |
IBM Spectrum Protect Plus hard-coded credentials |
$۱۰k-$25k |
۲.۱۱ |
|
|
CVE-2020-4692 |
۴.۳ |
IBM Sterling B2B Integrator Standard Edition Dashboard UI information disclosure |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4937 |
۵.۹ |
IBM Sterling B2B Integrator Standard Edition inadequate encryption |
$۵k-$25k |
۱.۱۸ |
|
|
CVE-2020-4475 |
۴.۳ |
IBM Sterling B2B Integrator Standard Edition information exposure |
$۵k-$10k |
۰.۰۵ |
|
|
CVE-2020-4671 |
۶.۵ |
IBM Sterling B2B Integrator Standard Edition log file |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4566 |
۶.۵ |
IBM Sterling B2B Integrator Standard Edition log file |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4700 |
۷.۵ |
IBM Sterling B2B Integrator Standard Edition Privileges access control |
$۱۰k-$25k |
۰.۰۵ |
|
|
CVE-2020-4655 |
۶.۳ |
IBM Sterling B2B Integrator Standard Edition sql injection |
$۱۰k-$25k |
۰.۰۰ |
|
|
CVE-2020-4705 |
۴.۸ |
IBM Sterling B2B Integrator Standard Edition Web UI cross site scripting |
$۲k-$5k |
۰.۰۰ |
|
|
CVE-2020-4763 |
۴.۳ |
IBM Sterling File Gateway Authorization Token missing secure attribute |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4665 |
۴.۳ |
IBM Sterling File Gateway Authorization Token missing secure attribute |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4476 |
۵.۳ |
IBM Sterling File Gateway information exposure |
$۵k-$10k |
۰.۰۰ |
|
|
CVE-2020-4647 |
۶.۳ |
IBM Sterling File Gateway sql injection |
$۱۰k-$25k |
۰.۰۶ |
|
|
CVE-2020-28642 |
۷.۳ |
InfiniteWP Admin Panel Password resetPasswordSendMail weak password recovery |
$۲k-$5k |
۰.۰۰ |
|
|
CVE-2020-12352 |
۴.۳ |
Intel BlueZ information disclosure |
$۵k-$10k |
۳.۱۱ |
|
|
CVE-2020-12351 |
۶.۳ |
Intel BlueZ input validation |
$۱۰k-$25k |
۲.۰۰ |
|
|
CVE-2020-0569 |
۳.۳ |
Intel PROSet/Wireless WiFi out-of-bounds write |
$۵k-$10k |
۱.۷۸ |
|
|
CVE-2020-13769 |
۸.۸ |
Ivanti Endpoint Manager alert_log.aspx sql injection |
$۱k-$2k |
۰.۰۵ |
|
|
CVE-2020-13773 |
۳.۵ |
Ivanti Endpoint Manager frm_splitfrm.aspx cross site scripting |
$۰-$۱k |
۰.۰۵ |
|
|
CVE-2020-13772 |
۵.۳ |
Ivanti Endpoint Manager ldprov.cgi information disclosure |
$۰-$۱k |
۰.۰۵ |
|
|
CVE-2020-27623 |
۳.۵ |
JetBrains IdeaVim information disclosure |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-27622 |
۳.۵ |
JetBrains IntelliJ IDEA Web Server information disclosure |
$۰-$۱k |
۰.۰۵ |
|
|
CVE-2020-26129 |
۵.۵ |
JetBrains Ktor request smuggling |
$۱k-$2k |
۰.۰۰ |
|
|
CVE-2020-27628 |
۵.۵ |
JetBrains TeamCity Audit Record unknown vulnerability |
$۲k-$5k |
۰.۰۵ |
|
|
CVE-2020-27629 |
۵.۵ |
JetBrains TeamCity Dependency unknown vulnerability |
$۲k-$5k |
۰.۰۶ |
|
|
CVE-2020-27627 |
۵.۵ |
JetBrains TeamCity URL injection |
$۱k-$2k |
۰.۰۶ |
|
|
CVE-2020-25013 |
۳.۵ |
JetBrains ToolBox Browser Protocol denial of service |
$۰-$۱k |
۰.۰۵ |
|
|
CVE-2020-25207 |
۶.۳ |
JetBrains ToolBox Browser Protocol Remote Privilege Escalation |
$۲k-$5k |
۰.۰۵ |
|
|
CVE-2020-24366 |
۳.۵ |
JetBrains YouTrack Backup information disclosure |
$۰-$۱k |
۰.۰۰ |
Official Fix |
|
CVE-2020-27625 |
۳.۵ |
JetBrains YouTrack Notification information disclosure |
$۰-$۱k |
۰.۰۶ |
Official Fix |
|
CVE-2020-25209 |
۴.۳ |
JetBrains YouTrack REST API access control |
$۲k-$5k |
۰.۰۵ |
Official Fix |
|
CVE-2020-27626 |
۵.۵ |
JetBrains YouTrack server-side request forgery |
$۱k-$2k |
۰.۰۰ |
Official Fix |
|
CVE-2020-27624 |
۵.۵ |
JetBrains YouTrack server-side request forgery |
$۱k-$2k |
۰.۰۶ |
Official Fix |
|
CVE-2020-25210 |
۵.۵ |
JetBrains YouTrack Workflow Rule behavioral workflow |
$۱k-$2k |
۰.۰۴ |
Official Fix |
|
CVE-2020-10776 |
۳.۵ |
Keycloak cross site scripting |
$۰-$۱k |
۰.۳۱ |
|
|
CVE-2020-14389 |
۶.۳ |
KeyCloak unnecessary privileges |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-19668 |
۵.۵ |
libsixel fromgif.c gif_out_code array index |
$۰-$۵k |
۰.۹۳ |
Not Defined |
|
CVE-2020-28975 |
۳.۵ |
Libsvm Model SVM svm.cpp svm_predict_values denial of service |
$۰-$۵k |
۴.۲۰ |
|
|
CVE-2020-28915 |
۳.۳ |
Linux Kernel fbcon buffer overflow |
$۵k-$10k |
۰.۱۷ |
|
|
CVE-2020-28974 |
۵.۳ |
Linux Kernel fbcon vt.c KD_FONT_OP_COPY out-of-bounds read |
$۰-$۵k |
۱.۲۶ |
|
|
CVE-2020-25705 |
۴.۳ |
Linux Kernel ICMP Packet random values |
$۵k-$10k |
۰.۶۷ |
|
|
CVE-2020-28941 |
۳.۳ |
Linux Kernel Speakup Driver spk_ttyio.c denial of service |
$۱k-$2k |
۰.۲۵ |
|
|
CVE-2020-25834 |
۶.۱ |
Micro Focus Arcsight Logger cross site scripting |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-11860 |
۶.۱ |
Micro Focus Arcsight Logger cross site scripting |
$۰-$۱k |
۰.۰۸ |
|
|
CVE-2020-11851 |
۶.۳ |
Micro Focus Arcsight Logger Remote Privilege Escalation |
$۲k-$5k |
۰.۰۸ |
|
|
CVE-2020-25832 |
۵.۴ |
Micro Focus Filr Scripting cross site scripting |
$۰-$۱k |
۰.۰۵ |
Not Defined |
|
CVE-2020-25833 |
۴.۸ |
Micro Focus IDOL cross site scripting |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-5668 |
۵.۳ |
Mitsubishi Electric MELSEC iQ-R resource consumption |
$۰-$۵k |
۱.۰۹ |
Not Defined |
|
CVE-2020-5666 |
۴.۳ |
Mitsubishi Electric MELSEC iQ-R resource consumption |
$۰-$۱k |
۰.۰۴ |
Not Defined |
|
CVE-2018-20804 |
۶.۵ |
MongoDB applyOps Invocation denial of service |
$۰-$۱k |
۳.۵۵ |
|
|
CVE-2018-20805 |
۶.۵ |
MongoDB denial of service |
$۰-$۱k |
۳.۶۸ |
|
|
CVE-2019-20924 |
۶.۵ |
MongoDB IndexBoundsBuilder denial of service |
$۰-$۱k |
۳.۲۸ |
|
|
CVE-2019-20923 |
۶.۵ |
MongoDB Javascript routine |
$۲k-$5k |
۳.۳۵ |
|
|
CVE-2019-2392 |
۶.۵ |
MongoDB Mod Operator integer overflow |
$۲k-$5k |
۳.۵۵ |
|
|
CVE-2020-7928 |
۶.۵ |
MongoDB Query buffer overflow |
$۲k-$5k |
۲.۱۱ |
|
|
CVE-2018-20802 |
۶.۵ |
MongoDB QueryPlanner denial of service |
$۰-$۱k |
۳.۳۳ |
|
|
CVE-2018-20803 |
۶.۵ |
MongoDB recursion |
$۰-$۱k |
۴.۱۸ |
|
|
CVE-2020-7925 |
۷.۵ |
MongoDB Role Name Parser denial of service |
$۰-$۱k |
۳.۹۴ |
|
|
CVE-2020-7926 |
۶.۵ |
MongoDB Server Selection Subsystem handling of exceptional conditions |
$۲k-$5k |
۴.۱۱ |
|
|
CVE-2019-2393 |
۶.۵ |
MongoDB use after free |
$۲k-$5k |
۴.۰۰ |
|
|
CVE-2020-25699 |
۵.۵ |
Moodle Capability Check access control |
$۱۰k-$25k |
۰.۳۳ |
|
|
CVE-2020-25702 |
۳.۵ |
Moodle cross site scripting |
$۲k-$5k |
۰.۳۴ |
Not Defined |
|
CVE-2020-25700 |
۵.۵ |
Moodle Database Module Web Service sql injection |
$۱۰k-$25k |
۰.۵۸ |
|
|
CVE-2020-25703 |
۳.۵ |
Moodle Participants Table Download insertion of sensitive information into sent data |
$۵k-$10k |
۰.۲۵ |
|
|
CVE-2020-25701 |
۵.۵ |
Moodle Upload Course Tool access control |
$۱۰k-$25k |
۰.۳۳ |
|
|
CVE-2020-25698 |
۵.۵ |
Moodle User Enrollment access control |
$۱۰k-$25k |
۰.۱۷ |
|
|
CVE-2020-27991 |
۵.۴ |
Nagios XI Account Information cross site scripting |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-28648 |
۶.۳ |
Nagios XI Auto-Discovery input validation |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-27989 |
۵.۴ |
Nagios XI Dashboard Tools cross site scripting |
$۰-$۱k |
۰.۰۴ |
|
|
CVE-2020-27990 |
۵.۴ |
Nagios XI Deployment Tool cross site scripting |
$۰-$۱k |
۰.۰۴ |
|
|
CVE-2020-27988 |
۵.۴ |
Nagios XI Manage Users Page cross site scripting |
$۰-$۱k |
۰.۰۰ |
|
|
CVE-2020-8259 |
۶.۳ |
Nextcloud Server insufficiently protected credentials |
$۱k-$2k |
۰.۰۷ |
|
|
CVE-2020-8152 |
۵.۵ |
Nextcloud Server insufficiently protected credentials |
$۰-$۱k |
۰.۰۹ |
|
|
CVE-2020-8278 |
۵.۵ |
Nextcloud Social App access control |
$۱k-$2k |
۰.۴۰ |
|
|
CVE-2020-8279 |
۷.۳ |
Nextcloud Social Server Certificate certificate validation |
$۱k-$2k |
۰.۲۴ |
|
|
CVE-2020-8277 |
۳.۵ |
Node.js DNS Request resource consumption |
$۰-$۱k |
۰.۶۷ |
|
|
CVE-2020-25185 |
۶.۳ |
Paradox IP150 buffer overflow |
$۰-$۵k |
۰.۸۴ |
Not Defined |
|
CVE-2020-25189 |
۷.۳ |
Paradox IP150 stack-based buffer overflow |
$۰-$۵k |
۶.۸۰ |
Not Defined |
|
CVE-2020-20740 |
۵.۵ |
PDFResurrect Header Validation pdf_get_version heap-based buffer overflow |
$۰-$۵k |
۰.۸۴ |
|
|
CVE-2020-24723 |
۳.۵ |
PHPGurukul User Registration & Login/User Management System Admin Panel cross site scripting |
$۰-$۱k |
۰.۰۰ |
Not Defined |
|
CVE-2020-25952 |
۷.۳ |
PHPGurukul User Registration & Login/User Management System sql injection |
$۲k-$5k |
۰.۲۵ |
Not Defined |
|
CVE-2020-25694 |
۸.۱ |
PostgreSQL Client Application downgrade |
$۰-$۱k |
۰.۰۶ |
|
|
CVE-2020-25695 |
۸.۸ |
PostgreSQL permission |
$۲k-$5k |
۰.۰۷ |
|
|
CVE-2020-26225 |
۸.۷ |
PrestaShop Product Comments Link cross site scripting |
$۰-$۱k |
۰.۰۵ |
|
|
CVE-2020-26224 |
۷.۵ |
PrestaShop Shopping Cart access control |
$۲k-$5k |
۰.۰۸ |
|
|
CVE-2020-25989 |
۸.۰ |
Pritunl Electron Client access control |
$۰-$۵k |
۰.۲۴ |
|
|
CVE-2020-2490 |
۷.۲ |
QNAP QTS command injection |
$۲k-$5k |
۰.۰۶ |
|
|
CVE-2020-2492 |
۷.۲ |
QNAP QTS os command injection |
$۱k-$2k |
۰.۰۶ |
|
|
CVE-2020-26884 |
۴.۳ |
RSA Archer URL cross site scripting |
$۵k-$10k |
۰.۰۸ |
Not Defined |
|
CVE-2020-7561 |
۶.۳ |
Schneider Electric Easergy T300 access control |
$۰-$۵k |
۰.۸۴ |
Not Defined |
|
CVE-2020-28209 |
۸.۸ |
Schneider Electric EcoStruxure Building Operation Enterprise Server Installer unquoted search path |
$۰-$۵k |
۱.۹۴ |
Not Defined |
|
CVE-2020-7573 |
۶.۳ |
Schneider Electric EcoStruxure Building Operation WebReports Access Control access control |
$۰-$۵k |
۰.۹۲ |
Not Defined |
|
CVE-2020-7569 |
۶.۳ |
Schneider Electric EcoStruxure Building Operation WebReports unrestricted upload |
$۰-$۵k |
۰.۵۹ |
Not Defined |
|
CVE-2020-7571 |
۳.۵ |
Schneider Electric EcoStruxure Building Operation WebReports Web Page Generation cross site scripting |
$۰-$۵k |
۱.۰۱ |
Not Defined |
|
CVE-2020-7570 |
۳.۵ |
Schneider Electric EcoStruxure Building Operation WebReports Web Page Generation cross site scripting |
$۰-$۵k |
۰.۷۶ |
Not Defined |
|
CVE-2020-7572 |
۶.۳ |
Schneider Electric EcoStruxure Building Operation WebReports XML External Entity xml external entity reference |
$۰-$۵k |
۰.۸۴ |
Not Defined |
|
CVE-2020-28210 |
۳.۵ |
Schneider Electric EcoStruxure Building Operation WebStation Web Page Generation cross site scripting |
$۰-$۵k |
۰.۲۵ |
Not Defined |
|
CVE-2020-28211 |
۶.۳ |
Schneider Electric EcoStruxure Control Expert PLC Simulator authorization |
$۰-$۵k |
۰.۳۲ |
Not Defined |
|
CVE-2020-7559 |
۵.۵ |
Schneider Electric EcoStruxure Control Expert PLC Simulator buffer overflow |
$۰-$۵k |
۰.۵۰ |
Not Defined |
|
CVE-2020-28213 |
۳.۵ |
Schneider Electric EcoStruxure Control Expert PLC Simulator code download |
$۰-$۵k |
۰.۴۹ |
Not Defined |
|
CVE-2020-28212 |
۵.۳ |
Schneider Electric EcoStruxure Control Expert PLC Simulator excessive authentication |
$۰-$۵k |
۰.۲۵ |
Not Defined |
|
CVE-2020-7538 |
۳.۵ |
Schneider Electric EcoStruxure Control Expert PLC Simulator improper check for unusual conditions |
$۰-$۵k |
۰.۴۲ |
Not Defined |
|
CVE-2020-7544 |
۵.۵ |
Schneider Electric EcoStruxure Operator Terminal Expert privileges management |
$۰-$۵k |
۰.۵۹ |
Not Defined |
|
CVE-2020-7552 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Def.exe memory corruption |
$۰-$۵k |
۰.۲۵ |
Not Defined |
|
CVE-2020-7551 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Def.exe memory corruption |
$۰-$۵k |
۰.۳۴ |
Not Defined |
|
CVE-2020-7554 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe memory corruption |
$۰-$۵k |
۰.۲۵ |
Not Defined |
|
CVE-2020-7557 |
۴.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe out-of-bounds read |
$۰-$۵k |
۰.۵۸ |
Not Defined |
|
CVE-2020-7558 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe out-of-bounds write |
$۰-$۵k |
۰.۴۱ |
Not Defined |
|
CVE-2020-7556 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe out-of-bounds write |
$۰-$۵k |
۰.۵۰ |
Not Defined |
|
CVE-2020-7555 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe out-of-bounds write |
$۰-$۵k |
۰.۵۹ |
Not Defined |
|
CVE-2020-7553 |
۶.۳ |
Schneider Electric IGSS Definition Configuration Group File Def.exe out-of-bounds write |
$۰-$۵k |
۰.۷۶ |
Not Defined |
|
CVE-2020-7550 |
۶.۳ |
Schneider Electric IGSS Definition Def.exe memory corruption |
$۰-$۵k |
۰.۵۰ |
Not Defined |
|
CVE-2020-7565 |
۳.۱ |
Schneider Electric Modicon M221 inadequate encryption |
$۰-$۵k |
۰.۷۶ |
Not Defined |
|
CVE-2020-7568 |
۳.۵ |
Schneider Electric Modicon M221 information disclosure |
$۰-$۵k |
۰.۷۶ |
Not Defined |
|
CVE-2020-7567 |
۳.۵ |
Schneider Electric Modicon M221 missing encryption |
$۰-$۵k |
۰.۵۰ |
Not Defined |
|
CVE-2020-7566 |
۳.۵ |
Schneider Electric Modicon M221 random values |
$۰-$۵k |
۰.۵۹ |
Not Defined |
|
CVE-2020-7564 |
۵.۵ |
Schneider Electric Modicon M340 Web Server buffer overflow |
$۲k-$5k |
۰.۰۸ |
Not Defined |
|
CVE-2020-7562 |
۳.۵ |
Schneider Electric Modicon M340 Web Server out-of-bounds read |
$۰-$۱k |
۰.۱۵ |
Not Defined |
|
CVE-2020-7563 |
۵.۵ |
Schneider Electric Modicon M340 Web Server out-of-bounds write |
$۲k-$5k |
۰.۰۸ |
|
|
CVE-2020-26236 |
۷.۵ |
ScratchVerifier improper authentication |
$۰-$۵k |
۰.۷۶ |
|
|
CVE-2020-27985 |
۷.۸ |
Security Onion sudo so-setup access control |
$۲k-$5k |
۳.۶۶ |
|
|
CVE-2020-26226 |
۸.۱ |
semantic-release URL escape output |
$۲k-$5k |
۰.۳۴ |
|
|
CVE-2020-28129 |
۳.۵ |
SourceCodester Gym Management System cross site scripting |
$۰-$۱k |
۰.۰۶ |
Not Defined |
|
CVE-2020-28130 |
۶.۳ |
SourceCodester Library Management System Image Upload unrestricted upload |
$۲k-$5k |
۰.۰۸ |
Not Defined |
|
CVE-2020-28140 |
۹.۸ |
SourceCodester Online Clothing Store Image Upload Products.php unrestricted upload |
$۲k-$5k |
۱.۰۰ |
Not Defined |
|
CVE-2020-28138 |
۹.۸ |
SourceCodester Online Clothing Store login.php sql injection |
$۱k-$2k |
۰.۰۷ |
Not Defined |
|
CVE-2020-28139 |
۶.۱ |
SourceCodester Online Clothing Store offer.php cross site scripting |
$۰-$۱k |
۰.۸۴ |
Not Defined |
|
CVE-2020-28133 |
۷.۳ |
SourceCodester Simple Grocery Store Sales and Inventory System login.php sql injection |
$۲k-$5k |
۰.۰۷ |
Not Defined |
|
CVE-2020-28136 |
۶.۳ |
SourceCodester Tourism Management System create-package.php unrestricted upload |
$۲k-$5k |
۰.۳۷ |
Not Defined |
|
CVE-2020-28183 |
۶.۳ |
SourceCodester Water Billing System process.php sql injection |
$۱k-$2k |
۱.۱۴ |
Not Defined |
|
CVE-2020-15301 |
۵.۵ |
SuiteCRM Accounts/Contacts/Opportunities/Leads csv injection |
$۲k-$5k |
۰.۱۴ |
Not Defined |
|
CVE-2020-15300 |
۵.۵ |
SuiteCRM Documents Module redirect |
$۱k-$2k |
۰.۰۷ |
Not Defined |
|
CVE-2020-14208 |
۳.۵ |
SuiteCRM Documents Preview cross site scripting |
$۰-$۱k |
۰.۰۸ |
Not Defined |
|
CVE-2020-12593 |
۴.۶ |
Symantec Endpoint Detection & Response information disclosure |
$۲k-$5k |
۰.۱۵ |
|
|
CVE-2020-5797 |
۸.۸ |
TP-LINK Archer C9 symlink |
$۰-$۵k |
۵.۷۱ |
|
|
CVE-2020-24297 |
۶.۳ |
TP-LINK TL-WPA4220 httpd powerline os command injection |
$۲k-$5k |
۱.۱۰ |
Official Fix |
|
CVE-2020-28005 |
۴.۳ |
TP-LINK TL-WPA4220 POST Request syslog denial of service |
$۰-$۱k |
۰.۰۷ |
Official Fix |
|
CVE-2020-28877 |
۵.۵ |
TP-LINK WDR7400 devDiscoverHandle Server copy_msg_element buffer overflow |
$۰-$۵k |
۱.۰۱ |
Not Defined |
|
CVE-2020-28572 |
۵.۵ |
Trend Micro Apex One Product Installer access control |
$۱۰k-$25k |
۰.۶۱ |
Not Defined |
|
CVE-2020-28580 |
۶.۳ |
Trend Micro InterScan Web Security Virtual Appliance HTTP Message AddVLANItem os command injection |
$۱۰k-$25k |
۲.۰۰ |
Not Defined |
|
CVE-2020-28581 |
۶.۳ |
Trend Micro InterScan Web Security Virtual Appliance HTTP Message ModifyVLANItem os command injection |
$۱۰k-$25k |
۳.۰۸ |
Not Defined |
|
CVE-2020-28578 |
۷.۳ |
Trend Micro InterScan Web Security Virtual Appliance HTTP Message Remote Code Execution |
$۱۰k-$25k |
۱.۹۲ |
Not Defined |
|
CVE-2020-28579 |
۶.۳ |
Trend Micro InterScan Web Security Virtual Appliance HTTP Message Remote Privilege Escalation |
$۱۰k-$25k |
۱.۷۵ |
Not Defined |
|
CVE-2020-27697 |
۵.۳ |
Trend Micro Security 2020 Installation symlink |
$۵k-$10k |
۰.۱۵ |
Not Defined |
|
CVE-2020-27696 |
۷.۸ |
Trend Micro Security 2020 Installation untrusted search path |
$۱۰k-$25k |
۱.۳۳ |
Not Defined |
|
CVE-2020-27695 |
۵.۳ |
Trend Micro Security 2020 Installation untrusted search path |
$۵k-$10k |
۰.۰۷ |
Not Defined |
|
CVE-2020-28574 |
۷.۳ |
Trend Micro Worry-Free Business Security Management Console path traversal |
$۱۰k-$25k |
۰.۴۶ |
Not Defined |
|
CVE-2020-26933 |
۷.۲ |
Trusted Computing Group Trusted Platform Module Library Family initialization |
$۲k-$5k |
۰.۰۰ |
Not Defined |
|
CVE-2020-12510 |
۸.۸ |
TwinCAT XAR TcSysUI.exe default permission |
$۲k-$5k |
۰.۱۶ |
Not Defined |
|
CVE-2020-26216 |
۸.۰ |
TYPO3 Fluid cross site scripting |
$۰-$۱k |
۰.۱۴ |
|
|
CVE-2020-4005 |
۸.۸ |
VMware ESXi System Call Remote Privilege Escalation |
$۵k-$25k |
۲.۲۷ |
Official Fix |
|
CVE-2020-4004 |
۹.۳ |
VMware ESXi/Workstation/Fusion XHCI USB Controller use after free |
$۵k-$25k |
۲.۱۰ |
Official Fix |
|
CVE-2020-28649 |
۸.۸ |
WordPress orbisius-child-theme-creator orbisius_ctc_theme_editor_manage_file cross-site request forgery |
$۰-$۱k |
۰.۰۹ |
|
|
CVE-2020-28650 |
۶.۴ |
WordPress WPBakery XSS Protection Mechanism kses_remove_filters protection mechanism failure |
$۲k-$5k |
۰.۱۰ |
|
|
CVE-2020-5663 |
۵.۴ |
XooNIps cross site scripting |
$۰-$۱k |
۰.۴۸ |
Not Defined |
|
CVE-2020-5662 |
۵.۴ |
XooNIps cross site scripting |
$۰-$۱k |
۰.۰۵ |
Not Defined |
|
CVE-2020-5664 |
۹.۸ |
XooNIps deserialization |
$۲k-$5k |
۰.۰۸ |
Not Defined |
|
CVE-2020-5659 |
۸.۸ |
XooNIps sql injection |
$۱k-$2k |
۰.۰۶ |
Not Defined |
|
CVE-2020-26217 |
۸.۰ |
Xstream Security Framework os command injection |
$۲k-$5k |
۰.۱۶ |
|
|
CVE-2020-7774 |
۷.۳ |
y18n code injection |
$۱k-$2k |
۰.۰۸ |
|
|
CVE-2020-6879 |
۵.۵ |
ZTE ZXHN Z500/ZXHN F670L Rule Configuration input validation |
$۱k-$2k |
۰.۲۵ |
سطح خطر حدود ۲۳% آسیبپذیریهای هفته، «پرخطر» و «حیاتی» برآورد شده است که قابل توجّه است.
ارزش روز صفرم ۲۳% آسیبپذیریهای هفته بیش از ۵۰۰۰ دلار بوده است.
خوشبختانه برای ۶۱% آسیبپذیریهای هفته، به‌روزرسانی‌ها و یا وصله‌هایی رسماً ارائه شده که برای جلوگیری از سوءاستفاده ازآسیب‌پذیری‌ها بهتر است سریعاً اعمال شوند.
