Security Vulnerabilities - CVEs Published In 2020
Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios. The lack of proper session expiration could allow attackers with local access to login into an existing browser session.
CVSS Score
7.1
EPSS Score
0.003
Published
2020-08-21
Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.
CVSS Score
5.3
EPSS Score
0.013
Published
2020-08-21
Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
CVSS Score
2.1
EPSS Score
0.003
Published
2020-08-21
When an actor claims to have a given identity,
Philips SureSigns VS4, A.07.107 and prior
does not prove or insufficiently proves the claim is correct.
CVSS Score
4.9
EPSS Score
0.01
Published
2020-08-21
Philips SureSigns VS4, A.07.107 and prior
does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVSS Score
6.3
EPSS Score
0.003
Published
2020-08-21
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.
CVSS Score
8.1
EPSS Score
0.014
Published
2020-08-21
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file.
CVSS Score
6.9
EPSS Score
0.003
Published
2020-08-21
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.
CVSS Score
6.1
EPSS Score
0.007
Published
2020-08-21
Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link.
CVSS Score
5.4
EPSS Score
0.007
Published
2020-08-21
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
CVSS Score
7.5
EPSS Score
0.009
Published
2020-08-21