Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2020-06-09 CVE-2020-9789 Out-of-bounds Write vulnerability in Apple products
An out-of-bounds write issue was addressed with improved bounds checking.
network
low complexity
apple CWE-787
8.8
2020-06-09 CVE-2020-13160 Use of Externally-Controlled Format String vulnerability in Anydesk
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
network
low complexity
anydesk CWE-134
7.5
2020-06-09 CVE-2020-13978 OS Command Injection vulnerability in Monstra CMS 3.0.4
Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the admin/index.php?id=themes&action=edit_chunk URI.
network
low complexity
monstra CWE-78
7.2
2020-06-09 CVE-2020-13976 OS Command Injection vulnerability in Dd-Wrt 16214/24
An issue was discovered in DD-WRT through 16214.
network
low complexity
dd-wrt CWE-78
8.8
2020-06-09 CVE-2020-10757 Type Confusion vulnerability in multiple products
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.
7.8
2020-06-09 CVE-2020-5589 Missing Authentication for Critical Function vulnerability in Sony products
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
low complexity
sony CWE-306
8.3
2020-06-09 CVE-2020-13974 Integer Overflow or Wraparound vulnerability in multiple products
An issue was discovered in the Linux kernel 4.4 through 5.7.1.
local
low complexity
linux debian canonical CWE-190
7.8
2020-06-09 CVE-2020-13962 Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users.
network
low complexity
mumble qt fedoraproject opensuse
7.5
2020-06-08 CVE-2020-13885 Incorrect Default Permissions vulnerability in Citrix Workspace APP 1909/1911/2002
Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application.
local
low complexity
citrix CWE-276
7.2
2020-06-08 CVE-2020-13884 Incorrect Default Permissions vulnerability in Citrix Workspace APP 1909/1911/2002
Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.
local
low complexity
citrix CWE-276
7.2