# CVEs published 2020-06-09

222 CVEs were published on June 9, 2020: 3 critical, 3 high. 4 are now in CISA KEV. Days are UTC.

- [CVE-2020-13996](https://cve.now/CVE-2020-13996.md): The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. (no CVSS)
- [CVE-2020-8337](https://cve.now/CVE-2020-8337.md): An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DC (no CVSS, Lenovo Synaptics Smart Audio UWP App)
- [CVE-2020-8336](https://cve.now/CVE-2020-8336.md): Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. (CVSS 6.4, Lenovo BIOS)
- [CVE-2020-8334](https://cve.now/CVE-2020-8334.md): The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unaut (CVSS 6.1, Lenovo BIOS)
- [CVE-2020-8323](https://cve.now/CVE-2020-8323.md): A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebo (CVSS 6.4, Lenovo BIOS)
- [CVE-2020-8322](https://cve.now/CVE-2020-8322.md): A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may all (CVSS 6.4, Lenovo BIOS)
- [CVE-2020-8321](https://cve.now/CVE-2020-8321.md): A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStati (CVSS 6.4, Lenovo BIOS)
- [CVE-2020-8320](https://cve.now/CVE-2020-8320.md): An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. (CVSS 6.4, Lenovo BIOS)
- [CVE-2019-6196](https://cve.now/CVE-2019-6196.md): A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during (CVSS 6.7, Lenovo Installation Packages)
- [CVE-2019-6173](https://cve.now/CVE-2019-6173.md): A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during inst (CVSS 6.7, Lenovo Installation Packages)
- [CVE-2020-1340](https://cve.now/CVE-2020-1340.md): A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofin (no CVSS, Microsoft NuGetGallery)
- [CVE-2020-1343](https://cve.now/CVE-2020-1343.md): An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual (no CVSS, Microsoft Visual Studio Code Live Share extension)
- [CVE-2020-1348](https://cve.now/CVE-2020-1348.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2020-1331](https://cve.now/CVE-2020-1331.md): A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to a (no CVSS, Microsoft System Center 2016 Operations Manager)
- [CVE-2020-1334](https://cve.now/CVE-2020-1334.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1327](https://cve.now/CVE-2020-1327.md): A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTM (no CVSS, Microsoft Azure DevOps Server)
- [CVE-2020-1329](https://cve.now/CVE-2020-1329.md): A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search (no CVSS, Microsoft Bing Search for Android)
- [CVE-2020-1323](https://cve.now/CVE-2020-1323.md): An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could se (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1324](https://cve.now/CVE-2020-1324.md): An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To (no CVSS, Microsoft Windows)
- [CVE-2020-1321](https://cve.now/CVE-2020-1321.md): A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft (no CVSS, Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +1)
- [CVE-2020-1322](https://cve.now/CVE-2020-1322.md): An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Micro (no CVSS, Microsoft Project · Microsoft Office +2)
- [CVE-2020-1317](https://cve.now/CVE-2020-1317.md): An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerab (no CVSS, Microsoft Windows)
- [CVE-2020-1318](https://cve.now/CVE-2020-1318.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1320](https://cve.now/CVE-2020-1320.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1315](https://cve.now/CVE-2020-1315.md): An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Informati (no CVSS, Microsoft Internet Explorer 11 on Windows · Microsoft Inter…)
- [CVE-2020-1316](https://cve.now/CVE-2020-1316.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1313](https://cve.now/CVE-2020-1313.md): An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2020-1314](https://cve.now/CVE-2020-1314.md): An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages (no CVSS, Microsoft Windows)
- [CVE-2020-1311](https://cve.now/CVE-2020-1311.md): An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model (no CVSS, Microsoft Windows)
- [CVE-2020-1312](https://cve.now/CVE-2020-1312.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows)
- [CVE-2020-1309](https://cve.now/CVE-2020-1309.md): An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an (no CVSS, Microsoft Windows)
- [CVE-2020-1310](https://cve.now/CVE-2020-1310.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-1306](https://cve.now/CVE-2020-1306.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1307](https://cve.now/CVE-2020-1307.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1304](https://cve.now/CVE-2020-1304.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1305](https://cve.now/CVE-2020-1305.md): An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2020-1301](https://cve.now/CVE-2020-1301.md): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, (no CVSS, Microsoft Windows)
- [CVE-2020-1302](https://cve.now/CVE-2020-1302.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows)
- [CVE-2020-1298](https://cve.now/CVE-2020-1298.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1299](https://cve.now/CVE-2020-1299.md): A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta (no CVSS, Microsoft Windows)
- [CVE-2020-1300](https://cve.now/CVE-2020-1300.md): A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an (no CVSS, Microsoft Windows)
- [CVE-2020-1296](https://cve.now/CVE-2020-1296.md): A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & (no CVSS, Microsoft Windows)
- [CVE-2020-1297](https://cve.now/CVE-2020-1297.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1294](https://cve.now/CVE-2020-1294.md): An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi (no CVSS, Microsoft Windows)
- [CVE-2020-1295](https://cve.now/CVE-2020-1295.md): An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1292](https://cve.now/CVE-2020-1292.md): An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, a (no CVSS, Microsoft Windows)
- [CVE-2020-1293](https://cve.now/CVE-2020-1293.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-1290](https://cve.now/CVE-2020-1290.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2020-1291](https://cve.now/CVE-2020-1291.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows)
- [CVE-2020-1286](https://cve.now/CVE-2020-1286.md): A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully explo (no CVSS, Microsoft Windows)
- [CVE-2020-1287](https://cve.now/CVE-2020-1287.md): An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi (no CVSS, Microsoft Windows)
- [CVE-2020-1289](https://cve.now/CVE-2020-1289.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Foundation)
- [CVE-2020-1283](https://cve.now/CVE-2020-1283.md): A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. (no CVSS, Microsoft Windows)
- [CVE-2020-1284](https://cve.now/CVE-2020-1284.md): A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, (no CVSS, Microsoft Windows)
- [CVE-2020-1281](https://cve.now/CVE-2020-1281.md): A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code (no CVSS, Microsoft Windows)
- [CVE-2020-1282](https://cve.now/CVE-2020-1282.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1279](https://cve.now/CVE-2020-1279.md): An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka ' (no CVSS, Microsoft Windows)
- [CVE-2020-1280](https://cve.now/CVE-2020-1280.md): An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetoo (no CVSS, Microsoft Windows)
- [CVE-2020-1277](https://cve.now/CVE-2020-1277.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows)
- [CVE-2020-1278](https://cve.now/CVE-2020-1278.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-1275](https://cve.now/CVE-2020-1275.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1276](https://cve.now/CVE-2020-1276.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1273](https://cve.now/CVE-2020-1273.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1274](https://cve.now/CVE-2020-1274.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1271](https://cve.now/CVE-2020-1271.md): An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabil (no CVSS, Microsoft Windows)
- [CVE-2020-1272](https://cve.now/CVE-2020-1272.md): An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading (no CVSS, Microsoft Windows)
- [CVE-2020-1268](https://cve.now/CVE-2020-1268.md): An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information (no CVSS, Microsoft Windows)
- [CVE-2020-1269](https://cve.now/CVE-2020-1269.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1270](https://cve.now/CVE-2020-1270.md): An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevatio (no CVSS, Microsoft Windows)
- [CVE-2020-1265](https://cve.now/CVE-2020-1265.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1266](https://cve.now/CVE-2020-1266.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1263](https://cve.now/CVE-2020-1263.md): An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report (no CVSS, Microsoft Windows)
- [CVE-2020-1264](https://cve.now/CVE-2020-1264.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1261](https://cve.now/CVE-2020-1261.md): An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report (no CVSS, Microsoft Windows)
- [CVE-2020-1262](https://cve.now/CVE-2020-1262.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1259](https://cve.now/CVE-2020-1259.md): A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Window (no CVSS, Microsoft Windows Server, · Microsoft Windows)
- [CVE-2020-1260](https://cve.now/CVE-2020-1260.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-1257](https://cve.now/CVE-2020-1257.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' (no CVSS, Microsoft Visual Studio · Microsoft Windows)
- [CVE-2020-1258](https://cve.now/CVE-2020-1258.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-1253](https://cve.now/CVE-2020-1253.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-1254](https://cve.now/CVE-2020-1254.md): An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally auth (no CVSS, Microsoft Windows)
- [CVE-2020-1255](https://cve.now/CVE-2020-1255.md): An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles (no CVSS, Microsoft Windows)
- [CVE-2020-1248](https://cve.now/CVE-2020-1248.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows)
- [CVE-2020-1251](https://cve.now/CVE-2020-1251.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-1246](https://cve.now/CVE-2020-1246.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1247](https://cve.now/CVE-2020-1247.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-1242](https://cve.now/CVE-2020-1242.md): An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information (no CVSS, Microsoft Edge (EdgeHTML-based) on Windows)
- [CVE-2020-1244](https://cve.now/CVE-2020-1244.md): A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Conn (no CVSS, Microsoft Windows)
- [CVE-2020-1239](https://cve.now/CVE-2020-1239.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-1241](https://cve.now/CVE-2020-1241.md): A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilit (no CVSS, Microsoft Windows)
- [CVE-2020-1237](https://cve.now/CVE-2020-1237.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o (no CVSS, Microsoft Windows)
- [CVE-2020-1238](https://cve.now/CVE-2020-1238.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-1234](https://cve.now/CVE-2020-1234.md): An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabili (no CVSS, Microsoft Windows)
- [CVE-2020-1235](https://cve.now/CVE-2020-1235.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1236](https://cve.now/CVE-2020-1236.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-1232](https://cve.now/CVE-2020-1232.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-1233](https://cve.now/CVE-2020-1233.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1230](https://cve.now/CVE-2020-1230.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-1231](https://cve.now/CVE-2020-1231.md): An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation (no CVSS, Microsoft Windows)
- [CVE-2020-1226](https://cve.now/CVE-2020-1226.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +2)
- [CVE-2020-1229](https://cve.now/CVE-2020-1229.md): A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, a (no CVSS, Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +2)
- [CVE-2020-1223](https://cve.now/CVE-2020-1223.md): A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerabi (no CVSS, Microsoft Word for Android)
- [CVE-2020-1225](https://cve.now/CVE-2020-1225.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +2)
- [CVE-2020-1219](https://cve.now/CVE-2020-1219.md): A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2)
- [CVE-2020-1220](https://cve.now/CVE-2020-1220.md): A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edg (no CVSS, Microsoft Edge (Chromium-based) in IE Mode on Windows)
- [CVE-2020-1222](https://cve.now/CVE-2020-1222.md): An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an (no CVSS, Microsoft Windows)
- [CVE-2020-1216](https://cve.now/CVE-2020-1216.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer 11 on Windows · Microsoft Inter…)
- [CVE-2020-1217](https://cve.now/CVE-2020-1217.md): An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Informati (no CVSS, Microsoft Windows)
- [CVE-2020-1214](https://cve.now/CVE-2020-1214.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer 11 on Windows · Microsoft Inter…)
- [CVE-2020-1215](https://cve.now/CVE-2020-1215.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-1212](https://cve.now/CVE-2020-1212.md): An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an (no CVSS, Microsoft Windows)
- [CVE-2020-1213](https://cve.now/CVE-2020-1213.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer 11 on Windows · Microsoft Inter…)
- [CVE-2020-1209](https://cve.now/CVE-2020-1209.md): An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Netw (no CVSS, Microsoft Windows)
- [CVE-2020-1211](https://cve.now/CVE-2020-1211.md): An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec (no CVSS, Microsoft Windows)
- [CVE-2020-1207](https://cve.now/CVE-2020-1207.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-1208](https://cve.now/CVE-2020-1208.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-1203](https://cve.now/CVE-2020-1203.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-1204](https://cve.now/CVE-2020-1204.md): An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi (no CVSS, Microsoft Windows)
- [CVE-2020-1206](https://cve.now/CVE-2020-1206.md): An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain req (no CVSS, Microsoft Windows)
- [CVE-2020-1201](https://cve.now/CVE-2020-1201.md): An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows No (no CVSS, Microsoft Windows)
- [CVE-2020-1202](https://cve.now/CVE-2020-1202.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-1197](https://cve.now/CVE-2020-1197.md): An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error R (no CVSS, Microsoft Windows)
- [CVE-2020-1199](https://cve.now/CVE-2020-1199.md): An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub (no CVSS, Microsoft Windows)
- [CVE-2020-1194](https://cve.now/CVE-2020-1194.md): A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Ser (no CVSS, Microsoft Windows)
- [CVE-2020-1196](https://cve.now/CVE-2020-1196.md): An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configurati (no CVSS, Microsoft Windows)
- [CVE-2020-1181](https://cve.now/CVE-2020-1181.md): A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1183](https://cve.now/CVE-2020-1183.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1177](https://cve.now/CVE-2020-1177.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1178](https://cve.now/CVE-2020-1178.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatio (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1163](https://cve.now/CVE-2020-1163.md): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabi (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +2)
- [CVE-2020-1170](https://cve.now/CVE-2020-1170.md): An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabi (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +2)
- [CVE-2020-1148](https://cve.now/CVE-2020-1148.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1160](https://cve.now/CVE-2020-1160.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr (no CVSS, Microsoft Windows)
- [CVE-2020-1162](https://cve.now/CVE-2020-1162.md): An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To (no CVSS, Microsoft Windows)
- [CVE-2020-1073](https://cve.now/CVE-2020-1073.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-1120](https://cve.now/CVE-2020-1120.md): A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Conn (no CVSS, Microsoft Windows)
- [CVE-2020-0916](https://cve.now/CVE-2020-0916.md): An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W (no CVSS, Microsoft Windows)
- [CVE-2020-0986](https://cve.now/CVE-2020-0986.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-0915](https://cve.now/CVE-2020-0915.md): An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W (no CVSS, Microsoft Windows)
- [CVE-2020-7456](https://cve.now/CVE-2020-7456.md): In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, (no CVSS, FreeBSD)
- [CVE-2020-13872](https://cve.now/CVE-2020-13872.md): Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. (no CVSS)
- [CVE-2020-11957](https://cve.now/CVE-2020-11957.md): The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Ra (no CVSS)
- [CVE-2020-6265](https://cve.now/CVE-2020-6265.md): SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass (CVSS 9.8, SAP SE SAP Commerce)
- [CVE-2020-13911](https://cve.now/CVE-2020-13911.md): Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. (no CVSS)
- [CVE-2020-12000](https://cve.now/CVE-2020-12000.md): The affected product is vulnerable to the handling of serialized data. (no CVSS, Ignition 8 Gateway)
- [CVE-2020-10644](https://cve.now/CVE-2020-10644.md): The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 (no CVSS, Ignition 8 Gateway)
- [CVE-2020-13892](https://cve.now/CVE-2020-13892.md): The SportsPress plugin before 2.7.2 for WordPress allows XSS. (no CVSS)
- [CVE-2020-12004](https://cve.now/CVE-2020-12004.md): The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignit (no CVSS, Ignition 8 Gateway)
- [CVE-2020-9412](https://cve.now/CVE-2020-9412.md): TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution (CVSS 10.0, TIBCO Software TIBCO Managed File Transfer Platform Server…)
- [CVE-2020-9411](https://cve.now/CVE-2020-9411.md): TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass (CVSS 10.0, TIBCO Software TIBCO Managed File Transfer Platform Server…)
- [CVE-2020-13160](https://cve.now/CVE-2020-13160.md): AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. (no CVSS)
- [CVE-2020-9852](https://cve.now/CVE-2020-9852.md): An integer overflow was addressed through improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9850](https://cve.now/CVE-2020-9850.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9856](https://cve.now/CVE-2020-9856.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-9843](https://cve.now/CVE-2020-9843.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9858](https://cve.now/CVE-2020-9858.md): A dynamic library loading issue was addressed with improved path searching. (no CVSS, Apple Windows Migration Assistant)
- [CVE-2020-9848](https://cve.now/CVE-2020-9848.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS)
- [CVE-2020-9855](https://cve.now/CVE-2020-9855.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple macOS)
- [CVE-2020-9851](https://cve.now/CVE-2020-9851.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9847](https://cve.now/CVE-2020-9847.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9841](https://cve.now/CVE-2020-9841.md): An integer overflow was addressed through improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-9844](https://cve.now/CVE-2020-9844.md): A double free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-9838](https://cve.now/CVE-2020-9838.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS)
- [CVE-2020-9842](https://cve.now/CVE-2020-9842.md): An entitlement parsing issue was addressed with improved parsing. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9837](https://cve.now/CVE-2020-9837.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2020-9839](https://cve.now/CVE-2020-9839.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9835](https://cve.now/CVE-2020-9835.md): An issue existed in the pausing of FaceTime video. (no CVSS, Apple iOS)
- [CVE-2020-9833](https://cve.now/CVE-2020-9833.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-9829](https://cve.now/CVE-2020-9829.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-9834](https://cve.now/CVE-2020-9834.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-9831](https://cve.now/CVE-2020-9831.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9832](https://cve.now/CVE-2020-9832.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-9826](https://cve.now/CVE-2020-9826.md): A denial of service issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-9824](https://cve.now/CVE-2020-9824.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9830](https://cve.now/CVE-2020-9830.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-9827](https://cve.now/CVE-2020-9827.md): A denial of service issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9822](https://cve.now/CVE-2020-9822.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9825](https://cve.now/CVE-2020-9825.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-9820](https://cve.now/CVE-2020-9820.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS)
- [CVE-2020-9821](https://cve.now/CVE-2020-9821.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9823](https://cve.now/CVE-2020-9823.md): This issue was addressed with improved checks. (no CVSS, Apple iOS)
- [CVE-2020-9789](https://cve.now/CVE-2020-9789.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-9818](https://cve.now/CVE-2020-9818.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 8.8, KEV, Apple iOS · Apple iOS-1 +1)
- [CVE-2020-9819](https://cve.now/CVE-2020-9819.md): A memory consumption issue was addressed with improved memory handling. (CVSS 4.3, KEV, Apple iOS · Apple iOS-1 +2)
- [CVE-2020-9816](https://cve.now/CVE-2020-9816.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9817](https://cve.now/CVE-2020-9817.md): A permissions issue existed. (no CVSS, Apple macOS)
- [CVE-2020-9815](https://cve.now/CVE-2020-9815.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9790](https://cve.now/CVE-2020-9790.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-9813](https://cve.now/CVE-2020-9813.md): A logic issue existed resulting in memory corruption. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9814](https://cve.now/CVE-2020-9814.md): A logic issue existed resulting in memory corruption. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9808](https://cve.now/CVE-2020-9808.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9788](https://cve.now/CVE-2020-9788.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2020-9812](https://cve.now/CVE-2020-9812.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9807](https://cve.now/CVE-2020-9807.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9811](https://cve.now/CVE-2020-9811.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9809](https://cve.now/CVE-2020-9809.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9806](https://cve.now/CVE-2020-9806.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9802](https://cve.now/CVE-2020-9802.md): A logic issue was addressed with improved restrictions. (CVSS 8.8, Apple iOS · Apple tvOS +4)
- [CVE-2020-9805](https://cve.now/CVE-2020-9805.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9803](https://cve.now/CVE-2020-9803.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9800](https://cve.now/CVE-2020-9800.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9804](https://cve.now/CVE-2020-9804.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9801](https://cve.now/CVE-2020-9801.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple Safari)
- [CVE-2020-9794](https://cve.now/CVE-2020-9794.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-9793](https://cve.now/CVE-2020-9793.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9795](https://cve.now/CVE-2020-9795.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9791](https://cve.now/CVE-2020-9791.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9797](https://cve.now/CVE-2020-9797.md): An information disclosure issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9792](https://cve.now/CVE-2020-9792.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2020-3882](https://cve.now/CVE-2020-3882.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-13266](https://cve.now/CVE-2020-13266.md): Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other user (CVSS 4.3, GitLab)
- [CVE-2020-13980](https://cve.now/CVE-2020-13980.md): OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because (no CVSS, opencart/opencart)
- [CVE-2020-13976](https://cve.now/CVE-2020-13976.md): An issue was discovered in DD-WRT through 16214. (no CVSS)
- [CVE-2020-13977](https://cve.now/CVE-2020-13977.md): Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify th (no CVSS)
- [CVE-2020-13978](https://cve.now/CVE-2020-13978.md): Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute (no CVSS)
- [CVE-2020-10757](https://cve.now/CVE-2020-10757.md): A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. (no CVSS, Kernel)
- [CVE-2020-10761](https://cve.now/CVE-2020-10761.md): An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. (CVSS 5.0, Red Hat QEMU:)
- [CVE-2020-5589](https://cve.now/CVE-2020-5589.md): SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP (no CVSS, Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, W…)
- [CVE-2020-13974](https://cve.now/CVE-2020-13974.md): An issue was discovered in the Linux kernel 4.4 through 5.7.1. (no CVSS)
- [CVE-2020-13973](https://cve.now/CVE-2020-13973.md): OWASP json-sanitizer before 1.2.1 allows XSS. (no CVSS, com.mikesamuel:json-sanitizer)
- [CVE-2020-13964](https://cve.now/CVE-2020-13964.md): An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. (no CVSS)
- [CVE-2020-13965](https://cve.now/CVE-2020-13965.md): An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. (CVSS 6.3, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.