# CVEs published 2020-06-11

123 CVEs were published on June 11, 2020: 0 critical, 3 high. Days are UTC.

- [CVE-2020-4045](https://cve.now/CVE-2020-4045.md): Information disclosure in SSB-DB (CVSS 7.5, ssbc SSB-DB · ssb-db)
- [CVE-2020-13170](https://cve.now/CVE-2020-13170.md): HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replicati (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-12797](https://cve.now/CVE-2020-12797.md): HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-12758](https://cve.now/CVE-2020-12758.md): HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-13250](https://cve.now/CVE-2020-13250.md): HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vuln (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-12023](https://cve.now/CVE-2020-12023.md): Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File (CVSS 2.0, Philips IntelliBridge Enterprise)
- [CVE-2020-12725](https://cve.now/CVE-2020-12725.md): Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and pri (no CVSS)
- [CVE-2020-13702](https://cve.now/CVE-2020-13702.md): The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent (CVSS 4.3)
- [CVE-2020-5411](https://cve.now/CVE-2020-5411.md): Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets" (no CVSS, Spring by VMware Spring Batch · org.springframework.batch:s…)
- [CVE-2020-11614](https://cve.now/CVE-2020-11614.md): Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. (no CVSS)
- [CVE-2020-11613](https://cve.now/CVE-2020-11613.md): Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the ins (no CVSS)
- [CVE-2020-0176](https://cve.now/CVE-2020-0176.md): In avdt\_msg\_prs\_rej of avdt\_msg.cc, there is a possible out-of-bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2020-0178](https://cve.now/CVE-2020-0178.md): In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0185](https://cve.now/CVE-2020-0185.md): In avrc\_pars\_browsing\_cmd of avrc\_pars\_tg.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0196](https://cve.now/CVE-2020-0196.md): In RegisterNotificationResponse::GetEvent of register\_notification\_packet.cc, there is a possible abort due to improper input validation. (no CVSS, Android)
- [CVE-2020-0206](https://cve.now/CVE-2020-0206.md): In the settings app, there is a possible app crash due to improper input validation. (no CVSS, Android)
- [CVE-2020-0214](https://cve.now/CVE-2020-0214.md): In ce\_t4t\_process\_select\_file\_cmd of ce\_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0233](https://cve.now/CVE-2020-0233.md): In main of main.cpp, there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2020-0139](https://cve.now/CVE-2020-0139.md): In NDEF\_MsgValidate of ndef\_utils.c, there is a possible out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0140](https://cve.now/CVE-2020-0140.md): In rw\_i93\_sm\_detect\_ndef of rw\_i93.c, there is a possible information disclosure due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0142](https://cve.now/CVE-2020-0142.md): In rw\_i93\_sm\_format of rw\_i93.c, there is a possible information disclosure due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0143](https://cve.now/CVE-2020-0143.md): In nfa\_dm\_ndef\_find\_next\_handler of nfa\_dm\_ndef.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0144](https://cve.now/CVE-2020-0144.md): In btm\_proc\_sp\_req\_evt of btm\_sec.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0145](https://cve.now/CVE-2020-0145.md): In btm\_simple\_pair\_complete of btm\_sec.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0146](https://cve.now/CVE-2020-0146.md): In btu\_hcif\_hardware\_error\_evt of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0147](https://cve.now/CVE-2020-0147.md): In btu\_hcif\_esco\_connection\_chg\_evt of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0148](https://cve.now/CVE-2020-0148.md): In btu\_hcif\_pin\_code\_request\_evt, btu\_hcif\_link\_key\_request\_evt, and btu\_hcif\_link\_key\_notification\_evt of btu\_hcif.cc, there is a possible (no CVSS, Android)
- [CVE-2020-0149](https://cve.now/CVE-2020-0149.md): In btu\_hcif\_mode\_change\_evt of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0150](https://cve.now/CVE-2020-0150.md): In rw\_t3t\_message\_set\_block\_list of rw\_t3t.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0153](https://cve.now/CVE-2020-0153.md): In phNxpNciHal\_write\_ext of phNxpNciHal\_ext.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0154](https://cve.now/CVE-2020-0154.md): In nci\_proc\_core\_rsp of nci\_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0155](https://cve.now/CVE-2020-0155.md): In phNxpNciHal\_send\_ese\_hal\_cmd of phNxpNciHal\_ext.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0156](https://cve.now/CVE-2020-0156.md): In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0157](https://cve.now/CVE-2020-0157.md): In nfa\_hci\_conn\_cback of nfa\_hci\_main.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0158](https://cve.now/CVE-2020-0158.md): In nfc\_ncif\_proc\_t3t\_polling\_ntf of nfc\_ncif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0159](https://cve.now/CVE-2020-0159.md): In rw\_mfc\_writeBlock of rw\_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0164](https://cve.now/CVE-2020-0164.md): In phNxpNciHal\_NfcDep\_cmd\_ext of phNxpNciHal\_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0165](https://cve.now/CVE-2020-0165.md): In phNxpNciHal\_NfcDep\_cmd\_ext of phNxpNciHal\_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0177](https://cve.now/CVE-2020-0177.md): In connect() of PanService.java, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2020-0183](https://cve.now/CVE-2020-0183.md): In handleMessage of BluetoothManagerService, there is an incomplete reset. (no CVSS, Android)
- [CVE-2020-0186](https://cve.now/CVE-2020-0186.md): In hal\_fd\_init of hal\_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0188](https://cve.now/CVE-2020-0188.md): In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. (no CVSS, Android)
- [CVE-2020-0201](https://cve.now/CVE-2020-0201.md): In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. (no CVSS, Android)
- [CVE-2020-0202](https://cve.now/CVE-2020-0202.md): In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a m (no CVSS, Android)
- [CVE-2020-0204](https://cve.now/CVE-2020-0204.md): In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. (no CVSS, Android)
- [CVE-2020-0215](https://cve.now/CVE-2020-0215.md): In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. (no CVSS, Android)
- [CVE-2020-0216](https://cve.now/CVE-2020-0216.md): In phNciNfc\_RecvMfResp of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0219](https://cve.now/CVE-2020-0219.md): In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. (no CVSS, Android)
- [CVE-2020-0129](https://cve.now/CVE-2020-0129.md): In SetData of btm\_ble\_multi\_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0133](https://cve.now/CVE-2020-0133.md): In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. (no CVSS, Android)
- [CVE-2020-0136](https://cve.now/CVE-2020-0136.md): In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0137](https://cve.now/CVE-2020-0137.md): In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission che (no CVSS, Android)
- [CVE-2020-0138](https://cve.now/CVE-2020-0138.md): In get\_element\_attr\_rsp of btif\_rc.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0160](https://cve.now/CVE-2020-0160.md): In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0161](https://cve.now/CVE-2020-0161.md): In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0162](https://cve.now/CVE-2020-0162.md): In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0163](https://cve.now/CVE-2020-0163.md): In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0169](https://cve.now/CVE-2020-0169.md): In RTTTL\_Event of eas\_rtttl.c, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0170](https://cve.now/CVE-2020-0170.md): In IMY\_Event of eas\_imelody.c, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0171](https://cve.now/CVE-2020-0171.md): In Parse\_lart of eas\_mdls.c, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0172](https://cve.now/CVE-2020-0172.md): In Parse\_art of eas\_mdls.c, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0173](https://cve.now/CVE-2020-0173.md): In Parse\_lins of eas\_mdls.c, there is possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0174](https://cve.now/CVE-2020-0174.md): In Parse\_ptbl of eas\_mdls.c, there is possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0175](https://cve.now/CVE-2020-0175.md): In XMF\_ReadNode of eas\_xmf.c, there is possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0181](https://cve.now/CVE-2020-0181.md): In exif\_data\_load\_data\_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0184](https://cve.now/CVE-2020-0184.md): In ihevcd\_ref\_list() of ihevcd\_ref\_list.c, there is a possible infinite loop due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0189](https://cve.now/CVE-2020-0189.md): In ihevcd\_decode() of ihevcd\_decode.c, there is possible resource exhaustion due to an infinite loop. (no CVSS, Android)
- [CVE-2020-0195](https://cve.now/CVE-2020-0195.md): In ihevcd\_iquant\_itrans\_recon\_ctb of ihevcd\_iquant\_itrans\_recon\_ctb.c and related functions, there is a possible information disclosure due (no CVSS, Android)
- [CVE-2020-0197](https://cve.now/CVE-2020-0197.md): In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0198](https://cve.now/CVE-2020-0198.md): In exif\_data\_load\_data\_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0199](https://cve.now/CVE-2020-0199.md): In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2020-0200](https://cve.now/CVE-2020-0200.md): In ReadLittleEndian of raw\_bit\_reader.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0205](https://cve.now/CVE-2020-0205.md): In the DaalaBitReader constructor of entropy\_decoder.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0207](https://cve.now/CVE-2020-0207.md): In next\_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2020-0211](https://cve.now/CVE-2020-0211.md): In SumCompoundHorizontalTaps of convolve\_neon.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0212](https://cve.now/CVE-2020-0212.md): In \_onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. (no CVSS, Android)
- [CVE-2020-0217](https://cve.now/CVE-2020-0217.md): In RW\_T4tPresenceCheck of rw\_t4t.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0126](https://cve.now/CVE-2020-0126.md): In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2020-0127](https://cve.now/CVE-2020-0127.md): In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0128](https://cve.now/CVE-2020-0128.md): In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0131](https://cve.now/CVE-2020-0131.md): In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. (no CVSS, Android)
- [CVE-2020-0132](https://cve.now/CVE-2020-0132.md): In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. (no CVSS, Android)
- [CVE-2020-0134](https://cve.now/CVE-2020-0134.md): In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0135](https://cve.now/CVE-2020-0135.md): In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0141](https://cve.now/CVE-2020-0141.md): In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. (no CVSS, Android)
- [CVE-2020-0151](https://cve.now/CVE-2020-0151.md): In avb\_vbmeta\_image\_verify of avb\_vbmeta\_image.c there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0152](https://cve.now/CVE-2020-0152.md): In avb\_vbmeta\_image\_verify of avb\_vbmeta\_image.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0167](https://cve.now/CVE-2020-0167.md): In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0168](https://cve.now/CVE-2020-0168.md): In impeg2\_fmt\_conv\_yuv420p\_to\_yuv420sp\_uv of impeg2\_format\_conv.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0179](https://cve.now/CVE-2020-0179.md): In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. (no CVSS, Android)
- [CVE-2020-0180](https://cve.now/CVE-2020-0180.md): In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0182](https://cve.now/CVE-2020-0182.md): In exif\_entry\_get\_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0190](https://cve.now/CVE-2020-0190.md): In ideint\_weave\_blk of ideint\_utils.c, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2020-0191](https://cve.now/CVE-2020-0191.md): In ih264d\_update\_default\_index\_list() of ih264d\_dpb\_mgr.c, there is a possible out of bounds read due to a logic error. (no CVSS, Android)
- [CVE-2020-0192](https://cve.now/CVE-2020-0192.md): In ih264d\_decode\_slice\_thread of ih264d\_thread\_parse\_decode.c, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2020-0193](https://cve.now/CVE-2020-0193.md): In ihevc\_intra\_pred\_chroma\_mode\_3\_to\_9\_av8 of ihevc\_intra\_pred\_chroma\_mode\_3\_to\_9.s, there is a possible out of bounds read due to a heap bu (no CVSS, Android)
- [CVE-2020-0194](https://cve.now/CVE-2020-0194.md): In ihevcd\_parse\_slice\_header of ihevcd\_parse\_slice\_header.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0209](https://cve.now/CVE-2020-0209.md): In multiple functions of AccountManager.java, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2020-0210](https://cve.now/CVE-2020-0210.md): In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. (no CVSS, Android)
- [CVE-2020-0213](https://cve.now/CVE-2020-0213.md): In hevcd\_fmt\_conv\_420sp\_to\_420sp\_av8 of ihevcd\_fmt\_conv\_420sp\_to\_420sp.s, there is a possible out of bounds write due to a heap buffer overf (no CVSS, Android)
- [CVE-2020-0218](https://cve.now/CVE-2020-0218.md): In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. (no CVSS, Android)
- [CVE-2020-0208](https://cve.now/CVE-2020-0208.md): In multiple functions of AccountManager.java, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2020-0203](https://cve.now/CVE-2020-0203.md): In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. (no CVSS, Android)
- [CVE-2020-0124](https://cve.now/CVE-2020-0124.md): In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0187](https://cve.now/CVE-2020-0187.md): In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. (no CVSS, Android)
- [CVE-2020-0166](https://cve.now/CVE-2020-0166.md): In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information (no CVSS, Android)
- [CVE-2020-6090](https://cve.now/CVE-2020-6090.md): An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). (no CVSS, Wago)
- [CVE-2020-4101](https://cve.now/CVE-2020-4101.md): "HCL Digital Experience is susceptible to Server Side Request Forgery." (no CVSS, "HCL Digital Experience")
- [CVE-2020-12712](https://cve.now/CVE-2020-12712.md): A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attack (no CVSS)
- [CVE-2020-4380](https://cve.now/CVE-2020-4380.md): IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Workload Scheduler)
- [CVE-2020-5593](https://cve.now/CVE-2020-5593.md): Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .z (no CVSS, Zenphoto)
- [CVE-2020-5592](https://cve.now/CVE-2020-5592.md): Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspeci (no CVSS, Zenphoto)
- [CVE-2020-13851](https://cve.now/CVE-2020-13851.md): Artica Pandora FMS 7.44 allows remote command execution via the events feature. (no CVSS)
- [CVE-2020-13852](https://cve.now/CVE-2020-13852.md): Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. (no CVSS)
- [CVE-2020-13853](https://cve.now/CVE-2020-13853.md): Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. (no CVSS)
- [CVE-2020-13854](https://cve.now/CVE-2020-13854.md): Artica Pandora FMS 7.44 allows privilege escalation. (no CVSS)
- [CVE-2020-13855](https://cve.now/CVE-2020-13855.md): Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. (no CVSS)
- [CVE-2020-13850](https://cve.now/CVE-2020-13850.md): Artica Pandora FMS 7.44 has inadequate access controls on a web folder. (no CVSS)
- [CVE-2020-13998](https://cve.now/CVE-2020-13998.md): Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because t (CVSS 7.5)
- [CVE-2020-12850](https://cve.now/CVE-2020-12850.md): The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. (no CVSS)
- [CVE-2020-12714](https://cve.now/CVE-2020-12714.md): An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1 (no CVSS)
- [CVE-2020-12713](https://cve.now/CVE-2020-12713.md): An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Mes (no CVSS)
- [CVE-2020-11090](https://cve.now/CVE-2020-11090.md): Uncontrolled Resource Consumption in Indy Node (CVSS 7.5, Hyperledger Indy Node · indy-node)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.