Total
413879 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2020-17367 | 4 Debian, Fedoraproject, Firejail Project and 1 more | 4 Debian Linux, Fedora, Firejail and 1 more | 2026-06-17 | 4.6 MEDIUM | 7.8 HIGH |
| Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection. | |||||
| CVE-2020-17366 | 1 Nlnetlabs | 1 Routinator | 2026-06-17 | 5.8 MEDIUM | 7.4 HIGH |
| An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view. | |||||
| CVE-2020-17365 | 1 Pango | 1 Hotspot Shield | 2026-06-17 | 7.2 HIGH | 7.8 HIGH |
| Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application. | |||||
| CVE-2020-17364 | 1 Usvn | 1 User-friendly Svn | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs. | |||||
| CVE-2020-17363 | 1 Usvn | 1 Usvn | 2026-06-17 | 9.0 HIGH | 9.9 CRITICAL |
| USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069. | |||||
| CVE-2020-17362 | 1 Themeinprogress | 1 Nova Lite | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS. | |||||
| CVE-2020-17361 | 1 Readytalk | 1 Avian | 2026-06-17 | 4.3 MEDIUM | 5.5 MEDIUM |
| An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer | |||||
| CVE-2020-17360 | 1 Readytalk | 1 Avian | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer | |||||
| CVE-2020-17355 | 1 Arista | 1 Eos | 2026-06-17 | 4.3 MEDIUM | 7.5 HIGH |
| Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed. | |||||
| CVE-2020-17354 | 1 Lilypond | 1 Lilypond | 2026-06-17 | N/A | 8.6 HIGH |
| LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, safe mode is removed, and the product no longer tries to block code execution when external files are used. | |||||
| CVE-2020-17353 | 4 Debian, Fedoraproject, Lilypond and 1 more | 5 Debian Linux, Fedora, Lilypond and 2 more | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code. | |||||
| CVE-2020-17352 | 1 Sophos | 1 Xg Firewall Firmware | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code. | |||||
| CVE-2020-17162 | 1 Microsoft | 6 Windows 10, Windows 8.1, Windows Rt 8.1 and 3 more | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| Microsoft Windows Security Feature Bypass Vulnerability | |||||
| CVE-2020-17159 | 1 Redhat | 1 Language Support For Java | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability | |||||
| CVE-2020-17158 | 1 Microsoft | 1 Dynamics 365 | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | |||||
| CVE-2020-17156 | 1 Microsoft | 2 Visual Studio 2017, Visual Studio 2019 | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| Visual Studio Remote Code Execution Vulnerability | |||||
| CVE-2020-17153 | 1 Microsoft | 1 Edge | 2026-06-17 | 5.8 MEDIUM | 4.3 MEDIUM |
| Microsoft Edge for Android Spoofing Vulnerability | |||||
| CVE-2020-17152 | 1 Microsoft | 1 Dynamics 365 | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | |||||
| CVE-2020-17150 | 1 Microsoft | 1 Tslint | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| Visual Studio Code Remote Code Execution Vulnerability | |||||
| CVE-2020-17148 | 1 Microsoft | 1 Visual Studio Code | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | |||||