CVEs published June 7, 2020
8 CVEs were published on June 7, 2020: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- facade/ignition
- 1
Medium, low and unrated 8
- CVE-2020-13912SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can
- CVE-2020-13910Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packe
- CVE-2020-13909The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env.facade/ignition
- CVE-2020-13904FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a
- CVE-2020-13902ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decodi
- CVE-2020-13897HESK before 3.1.10 allows reflected XSS.
- CVE-2020-13895Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s
- CVE-2020-13894handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.