# CVEs published 2020-06-02

56 CVEs were published on June 2, 2020: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-4026](https://cve.now/CVE-2020-4026.md): The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from v (no CVSS, Atlassian Navigator Links · Atlassian Crucible +1)
- [CVE-2019-20810](https://cve.now/CVE-2019-20810.md): go7007\_snd\_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd\_card\_free for a failure path, whic (no CVSS)
- [CVE-2020-13775](https://cve.now/CVE-2020-13775.md): ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no (no CVSS)
- [CVE-2020-12607](https://cve.now/CVE-2020-12607.md): An issue was discovered in fastecdsa before 2.1.2. (no CVSS, fastecdsa)
- [CVE-2020-13764](https://cve.now/CVE-2020-13764.md): common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user\_pass is not considered a special ca (no CVSS, wp-premium/gravityforms)
- [CVE-2020-13760](https://cve.now/CVE-2020-13760.md): In Joomla! before 3.9.19, missing token checks in com\_postinstall lead to CSRF. (no CVSS)
- [CVE-2020-13761](https://cve.now/CVE-2020-13761.md): In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modul (no CVSS)
- [CVE-2020-13762](https://cve.now/CVE-2020-13762.md): In Joomla! before 3.9.19, incorrect input validation of the module tag option in com\_modules allows XSS. (no CVSS)
- [CVE-2020-13763](https://cve.now/CVE-2020-13763.md): In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users. (no CVSS)
- [CVE-2020-12017](https://cve.now/CVE-2020-12017.md): GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. (no CVSS, GE Grid Solutions Reason RT Clocks)
- [CVE-2020-7662](https://cve.now/CVE-2020-7662.md): websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. (no CVSS, websocket-extensions)
- [CVE-2020-7663](https://cve.now/CVE-2020-7663.md): websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. (no CVSS, websocket-extensions)
- [CVE-2020-13759](https://cve.now/CVE-2020-13759.md): rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read\_ob (no CVSS, vm-memory)
- [CVE-2020-5410](https://cve.now/CVE-2020-5410.md): Directory Traversal with spring-cloud-config-server (CVSS 7.5, KEV, Spring by VMware Spring Cloud Config · org.springframework.…)
- [CVE-2019-11843](https://cve.now/CVE-2019-11843.md): The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the (no CVSS)
- [CVE-2018-18625](https://cve.now/CVE-2018-18625.md): Grafana 5.3.1 has XSS via a link on the "Dashboard \> All Panels \> General" screen. (no CVSS, github.com/grafana/grafana)
- [CVE-2018-18624](https://cve.now/CVE-2018-18624.md): Grafana 5.3.1 has XSS via a column style on the "Dashboard \> Table Panel" screen. (no CVSS, github.com/grafana/grafana)
- [CVE-2018-18623](https://cve.now/CVE-2018-18623.md): Grafana 5.3.1 has XSS via the "Dashboard \> Text Panel" screen. (no CVSS, github.com/grafana/grafana)
- [CVE-2020-3645](https://cve.now/CVE-2020-3645.md): Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compu (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2020-3680](https://cve.now/CVE-2020-3680.md): A race condition can occur when using the fastrpc memory mapping API. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3630](https://cve.now/CVE-2020-3630.md): Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Con (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3633](https://cve.now/CVE-2020-3633.md): Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3641](https://cve.now/CVE-2020-3641.md): Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3623](https://cve.now/CVE-2020-3623.md): kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2020-3625](https://cve.now/CVE-2020-3625.md): When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Aut (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-3616](https://cve.now/CVE-2020-3616.md): Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3618](https://cve.now/CVE-2020-3618.md): NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infra (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Mobile, Snapdragon…)
- [CVE-2020-3610](https://cve.now/CVE-2020-3610.md): Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3615](https://cve.now/CVE-2020-3615.md): Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to im (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14078](https://cve.now/CVE-2019-14078.md): Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14087](https://cve.now/CVE-2019-14087.md): Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapd (no CVSS, Qualcomm Snapdragon Consumer IOT, Snapdragon Mobile, Snapdr…)
- [CVE-2019-14066](https://cve.now/CVE-2019-14066.md): Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Featur (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14067](https://cve.now/CVE-2019-14067.md): Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14077](https://cve.now/CVE-2019-14077.md): Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14053](https://cve.now/CVE-2019-14053.md): When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14054](https://cve.now/CVE-2019-14054.md): Improper permissions in XBL\_SEC region enable user to update XBL\_SEC code and data and divert the RAM dump path to normal cold boot path in (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2019-14042](https://cve.now/CVE-2019-14042.md): Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14043](https://cve.now/CVE-2019-14043.md): Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14038](https://cve.now/CVE-2019-14038.md): Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14039](https://cve.now/CVE-2019-14039.md): Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon C (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-17603](https://cve.now/CVE-2019-17603.md): Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows loc (no CVSS)
- [CVE-2020-13227](https://cve.now/CVE-2020-13227.md): An issue was discovered in Sysax Multi Server 6.90. (no CVSS)
- [CVE-2020-10959](https://cve.now/CVE-2020-10959.md): resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via (no CVSS, mediawiki/core)
- [CVE-2020-13228](https://cve.now/CVE-2020-13228.md): An issue was discovered in Sysax Multi Server 6.90. (no CVSS)
- [CVE-2020-4503](https://cve.now/CVE-2020-4503.md): IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Planning Analytics Local)
- [CVE-2020-4431](https://cve.now/CVE-2020-4431.md): IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2020-4367](https://cve.now/CVE-2020-4367.md): IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive (CVSS 5.9, IBM Planning Analytics Local)
- [CVE-2020-4366](https://cve.now/CVE-2020-4366.md): IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Planning Analytics Local)
- [CVE-2020-4360](https://cve.now/CVE-2020-4360.md): IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2020-13229](https://cve.now/CVE-2020-13229.md): An issue was discovered in Sysax Multi Server 6.90. (no CVSS)
- [CVE-2020-13401](https://cve.now/CVE-2020-13401.md): An issue was discovered in Docker Engine before 19.03.11. (no CVSS, github.com/docker/docker-ce)
- [CVE-2020-13754](https://cve.now/CVE-2020-13754.md): hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation. (no CVSS)
- [CVE-2020-13659](https://cve.now/CVE-2020-13659.md): address\_space\_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer. (no CVSS)
- [CVE-2020-10739](https://cve.now/CVE-2020-10739.md): Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a special (CVSS 7.5, istio.io istio/envoy)
- [CVE-2020-10136](https://cve.now/CVE-2020-10136.md): IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic (no CVSS, IETF RFC2003 - IP Encapsulation within IP)
- [CVE-2020-10703](https://cve.now/CVE-2020-10703.md): A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for f (CVSS 6.5, libvirt)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.