CVEs published June 12, 2020
28 CVEs were published on June 12, 2020: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 7
- Low
- 3
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Adobe Experience Manager
- 6
- wordpress-develop
- 5
- Adobe Framemaker
- 3
- GeoVision Door Access Control Device
- 3
- Adobe Flash Player
- 1
- Apache Karaf · org.apache.karaf.management:org.apache.karaf…
- 1
- ArcSight Logger.
- 1
- IBM API Connect
- 1
- Linux kernel kernel
- 1
- openshift/openshift-apiserver
- 1
Medium, low and unrated 28
- CVE-2020-11839Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1.ArcSight Logger.
- CVE-2020-13656In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB)
- CVE-2019-16252Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff an
- CVE-2020-10752A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API openshift/openshift-apiserver
- CVE-2020-11980In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files.Apache Karaf · org.apache.karaf.management:org.apache.karaf…
- CVE-2019-15123The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website.
- CVE-2020-4047Authenticated XSS via media attachment page in WordPresswordpress-develop
- CVE-2020-4048Open redirect in wp_validate_redirect() in WordPresswordpress-develop
- CVE-2020-4049Authenticated self-XSS via theme uploads in WordPresswordpress-develop
- CVE-2020-4050set-screen-option filter misuse by plugins leading to privilege escalation in WordPresswordpress-develop
- CVE-2020-4046Authenticated XSS through embed block in WordPresswordpress-develop
- CVE-2020-14004An issue was discovered in Icinga2 before v2.12.0-rc1.
- CVE-2020-9633Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash PlayAdobe Flash Player
- CVE-2020-9651Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability.Adobe Experience Manager
- CVE-2020-9647Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability.Adobe Experience Manager
- CVE-2020-9636Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability.Adobe Framemaker
- CVE-2020-9644Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability.Adobe Experience Manager
- CVE-2020-9634Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-9648Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability.Adobe Experience Manager
- CVE-2020-9643Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability.Adobe Experience Manager
- CVE-2020-9645Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability.Adobe Experience Manager
- CVE-2020-9635Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability.Adobe Framemaker
- CVE-2020-4251IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting.IBM API Connect
- CVE-2020-3930GeoVision Door Access Control Device - Information disclosure vulnerabilityGeoVision Door Access Control Device
- CVE-2020-3929GeoVision Door Access Control Device - Shared cryptographic keysGeoVision Door Access Control Device
- CVE-2020-3928GeoVision Door Access Control Device - Hardcoded privileged passwordGeoVision Door Access Control Device
- CVE-2020-14048Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of depl
- CVE-2020-10732A flaw was found in the Linux kernel's implementation of Userspace core dumps.Linux kernel kernel