CVEs published June 4, 2020
100 CVEs were published on June 4, 2020: 0 critical, 1 high.
- Published
- 100
- Critical
- 0
- High
- 1
- Medium
- 6
- Low
- 0
- Unrated
- 93
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- IBM Security Guardium
- 3
- elliptic
- 1
- Fortinet FortiAnalyzer
- 1
- Fortinet FortiClient for Windows
- 1
- Fortinet FortiSIEMWindowsAgent
- 1
- IBM QRadar SIEM
- 1
- Kubernetes · k8s.io/kubernetes
- 1
- org.postgresql:postgresql
- 1
- The QEMU Project qemu
- 1
- url-regex
- 1
High 1
Medium, low and unrated 99
- CVE-2020-13843An issue was discovered on LG mobile devices with Android OS software before 2020-06-01.
- CVE-2020-13842An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets).
- CVE-2020-13841An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets).
- CVE-2020-13840An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets).
- CVE-2020-13839An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets).
- CVE-2020-8555Kubernetes kube-controller-manager SSRFKubernetes · k8s.io/kubernetes
- CVE-2020-13768In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary cod
- CVE-2020-13849The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remot
- CVE-2020-13848Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message d
- CVE-2020-12847Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with an administrator ro
- CVE-2020-12851Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositori
- CVE-2020-12852The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the
- CVE-2020-11682Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request.
- CVE-2020-12853Pydio Cells 2.0.4 allows XSS.
- CVE-2020-11681Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext.
- CVE-2020-11680Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality.
- CVE-2020-11679Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality.
- CVE-2020-10702A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in The QEMU Project qemu
- CVE-2020-7661all versions of url-regex are vulnerable to Regular Expression Denial of Service.url-regex
- CVE-2020-13829An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-13830An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2020-13831An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software.
- CVE-2020-13832An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software.
- CVE-2020-13833An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-13834An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software.
- CVE-2020-13835An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software.
- CVE-2020-13836An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-13837An issue was discovered on Samsung mobile devices with Q(10.0) software.
- CVE-2020-13838An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2019-20823An issue was discovered in Foxit PhantomPDF before 8.3.11.
- CVE-2019-20824An issue was discovered in Foxit PhantomPDF before 8.3.11.
- CVE-2019-20825An issue was discovered in Foxit PhantomPDF before 8.3.11.
- CVE-2019-20826An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3.
- CVE-2019-20827An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3.
- CVE-2019-20828An issue was discovered in Foxit Reader and PhantomPDF before 9.6.
- CVE-2019-20829An issue was discovered in Foxit Reader and PhantomPDF before 9.6.
- CVE-2019-20830An issue was discovered in Foxit Reader and PhantomPDF before 9.6.
- CVE-2019-20831An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733.
- CVE-2019-20832An issue was discovered in Foxit PhantomPDF before 8.3.10.
- CVE-2019-20833An issue was discovered in Foxit PhantomPDF before 8.3.10.
- CVE-2019-20834An issue was discovered in Foxit PhantomPDF before 8.3.10.
- CVE-2019-20835An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
- CVE-2019-20836An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
- CVE-2019-20837An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
- CVE-2018-21235An issue was discovered in Foxit E-mail advertising system before September 2018.
- CVE-2018-21236An issue was discovered in Foxit Reader before 2.4.4.
- CVE-2018-21237An issue was discovered in Foxit PhantomPDF before 8.3.7.
- CVE-2018-21238An issue was discovered in Foxit PhantomPDF before 8.3.7.
- CVE-2018-21239An issue was discovered in Foxit Reader and PhantomPDF before 9.2.
- CVE-2018-21240An issue was discovered in Foxit Reader and PhantomPDF before 9.2.
- CVE-2018-21241An issue was discovered in Foxit PhantomPDF before 8.3.6.
- CVE-2018-21242An issue was discovered in Foxit PhantomPDF before 8.3.6.
- CVE-2018-21243An issue was discovered in Foxit PhantomPDF before 8.3.6.
- CVE-2018-21244An issue was discovered in Foxit PhantomPDF before 8.3.6.
- CVE-2020-9462An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0.
- CVE-2019-20822An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430.
- CVE-2019-20821An issue was discovered in Foxit PhantomPDF Mac before 3.4.
- CVE-2019-20820An issue was discovered in Foxit Reader and PhantomPDF before 9.7.
- CVE-2019-20819An issue was discovered in Foxit Reader and PhantomPDF before 9.7.
- CVE-2019-20818An issue was discovered in Foxit Reader and PhantomPDF before 9.7.
- CVE-2019-20817An issue was discovered in Foxit Reader and PhantomPDF before 9.7.
- CVE-2019-20816An issue was discovered in Foxit PhantomPDF before 8.3.12.
- CVE-2019-20815An issue was discovered in Foxit PhantomPDF before 8.3.12.
- CVE-2019-20814An issue was discovered in Foxit PhantomPDF before 8.3.12.
- CVE-2019-20813An issue was discovered in Foxit PhantomPDF before 8.3.12.
- CVE-2020-13815An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1.
- CVE-2020-13814An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1.
- CVE-2020-13813An issue was discovered in Foxit Studio Photo before 3.6.6.922.
- CVE-2019-16384Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration.
- CVE-2019-16385Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated
- CVE-2020-13812An issue was discovered in Foxit Studio Photo before 3.6.6.922.
- CVE-2020-13765rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to tri
- CVE-2020-13811An issue was discovered in Foxit Studio Photo before 3.6.6.922.
- CVE-2020-13791hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configur
- CVE-2020-13800ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_
- CVE-2020-13692PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.org.postgresql:postgresql
- CVE-2020-13810An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13808An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13809An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13807An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13827phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.
- CVE-2020-13806An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13805An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13804An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
- CVE-2020-13803An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0.
- CVE-2020-13822The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflelliptic
- CVE-2020-4193IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.IBM Security Guardium
- CVE-2020-4191IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inforIBM Security Guardium
- CVE-2020-4183IBM Security Guardium 11.1 is vulnerable to cross-site scripting.IBM Security Guardium
- CVE-2020-13818In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.
- CVE-2020-6640An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to performFortinet FortiAnalyzer
- CVE-2020-9292An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoFortinet FortiSIEMWindowsAgent
- CVE-2020-13817ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change
- CVE-2019-16150Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows priorFortinet FortiClient for Windows
- CVE-2020-13777GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authent
- CVE-2020-10546rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection.
- CVE-2020-10547rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection.
- CVE-2020-10548rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection.
- CVE-2020-10549rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.