CVEs published June 11, 2020
123 CVEs were published on June 11, 2020: 0 critical, 3 high.
- Published
- 123
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 1
- Unrated
- 117
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Android
- 95
- github.com/hashicorp/consul
- 4
- Zenphoto
- 2
- "HCL Digital Experience"
- 1
- Hyperledger Indy Node · indy-node
- 1
- IBM Workload Scheduler
- 1
- Philips IntelliBridge Enterprise
- 1
- Spring by VMware Spring Batch · org.springframework.batch:s…
- 1
- ssbc SSB-DB · ssb-db
- 1
- Wago
- 1
High 3
- CVE-2020-4045Information disclosure in SSB-DBssbc SSB-DB · ssb-db
- CVE-2020-13998Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because t
- CVE-2020-11090Uncontrolled Resource Consumption in Indy NodeHyperledger Indy Node · indy-node
Medium, low and unrated 120
- CVE-2020-13170HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replicatigithub.com/hashicorp/consul
- CVE-2020-12797HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers.github.com/hashicorp/consul
- CVE-2020-12758HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry.github.com/hashicorp/consul
- CVE-2020-13250HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulngithub.com/hashicorp/consul
- CVE-2020-12023Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log FilePhilips IntelliBridge Enterprise
- CVE-2020-12725Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and pri
- CVE-2020-13702The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent
- CVE-2020-5411Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"Spring by VMware Spring Batch · org.springframework.batch:s…
- CVE-2020-11614Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP.
- CVE-2020-11613Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the ins
- CVE-2020-0176In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation.Android
- CVE-2020-0178In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check.Android
- CVE-2020-0185In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0196In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation.Android
- CVE-2020-0206In the settings app, there is a possible app crash due to improper input validation.Android
- CVE-2020-0214In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2020-0233In main of main.cpp, there is possible memory corruption due to a use after free.Android
- CVE-2020-0139In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2020-0140In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check.Android
- CVE-2020-0142In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check.Android
- CVE-2020-0143In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0144In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0145In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0146In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0147In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0148In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible Android
- CVE-2020-0149In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0150In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0153In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0154In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2020-0155In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0156In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0157In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0158In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0159In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2020-0164In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0165In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0177In connect() of PanService.java, there is a possible permissions bypass.Android
- CVE-2020-0183In handleMessage of BluetoothManagerService, there is an incomplete reset.Android
- CVE-2020-0186In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2020-0188In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error.Android
- CVE-2020-0201In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy.Android
- CVE-2020-0202In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a mAndroid
- CVE-2020-0204In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition.Android
- CVE-2020-0215In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass.Android
- CVE-2020-0216In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0219In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent.Android
- CVE-2020-0129In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check.Android
- CVE-2020-0133In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass.Android
- CVE-2020-0136In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow.Android
- CVE-2020-0137In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission cheAndroid
- CVE-2020-0138In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0160In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0161In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0162In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0163In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0169In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0170In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0171In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0172In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0173In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0174In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0175In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0181In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow.Android
- CVE-2020-0184In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check.Android
- CVE-2020-0189In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop.Android
- CVE-2020-0195In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due Android
- CVE-2020-0197In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0198In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow.Android
- CVE-2020-0199In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition.Android
- CVE-2020-0200In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0205In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0207In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation.Android
- CVE-2020-0211In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0212In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free.Android
- CVE-2020-0217In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0126In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition.Android
- CVE-2020-0127In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0128In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow.Android
- CVE-2020-0131In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data.Android
- CVE-2020-0132In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization.Android
- CVE-2020-0134In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data.Android
- CVE-2020-0135In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check.Android
- CVE-2020-0141In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition.Android
- CVE-2020-0151In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0152In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0167In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2020-0168In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0179In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation.Android
- CVE-2020-0180In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0182In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0190In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2020-0191In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error.Android
- CVE-2020-0192In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation.Android
- CVE-2020-0193In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buAndroid
- CVE-2020-0194In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0209In multiple functions of AccountManager.java, there is a possible permissions bypass.Android
- CVE-2020-0210In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy.Android
- CVE-2020-0213In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overfAndroid
- CVE-2020-0218In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition.Android
- CVE-2020-0208In multiple functions of AccountManager.java, there is a possible permissions bypass.Android
- CVE-2020-0203In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup.Android
- CVE-2020-0124In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0187In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison.Android
- CVE-2020-0166In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI informationAndroid
- CVE-2020-6090An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15).Wago
- CVE-2020-4101"HCL Digital Experience is susceptible to Server Side Request Forgery.""HCL Digital Experience"
- CVE-2020-12712A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attack
- CVE-2020-4380IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting.IBM Workload Scheduler
- CVE-2020-5593Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zZenphoto
- CVE-2020-5592Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspeciZenphoto
- CVE-2020-13851Artica Pandora FMS 7.44 allows remote command execution via the events feature.
- CVE-2020-13852Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
- CVE-2020-13853Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
- CVE-2020-13854Artica Pandora FMS 7.44 allows privilege escalation.
- CVE-2020-13855Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature.
- CVE-2020-13850Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
- CVE-2020-12850The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4.
- CVE-2020-12714An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1
- CVE-2020-12713An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Mes