CVEs published June 17, 2020
51 CVEs were published on June 17, 2020: 2 critical, 2 high. 1 is now in CISA KEV.
- Published
- 51
- Critical
- 2
- High
- 2
- Medium
- 4
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 1
- Fix available
- 5
Most affected products
- ISC BIND9
- 2
- <ZTEMarket APK>
- 1
- github.com/unknwon/cae/tz · github.com/unknwon/cae
- 1
- github.com/unknwon/cae/zip · github.com/unknwon/cae
- 1
- golang.org/x/text
- 1
- IBM Business Process Manager Express
- 1
- mjml
- 1
- omero-web
- 1
Critical 2
High 2
Medium, low and unrated 47
- CVE-2020-8619A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferISC BIND9
- CVE-2020-8618A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferISC BIND9
- CVE-2020-14157The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used pro
- CVE-2020-14040The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite logolang.org/x/text
- CVE-2020-14408An issue was discovered in Agentejo Cockpit 0.10.2.
- CVE-2020-4532IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could IBM Business Process Manager Express
- CVE-2020-6869All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability.<ZTEMarket APK>
- CVE-2020-9332ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HI
- CVE-2020-13637An issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and possibly other platforms.
- CVE-2020-6752In OMERO before 5.6.1, group owners can access members' data in other groups.
- CVE-2019-16245OMERO before 5.6.1 makes the details of each user available to all users.
- CVE-2020-7932OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters.omero-web
- CVE-2019-9943In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMER
- CVE-2019-9944In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO perm
- CVE-2020-14396An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14397An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14398An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14399An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14400An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14401An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14402An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14403An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14404An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14405An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2019-20839libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
- CVE-2019-20840An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2018-21247An issue was discovered in LibVNCServer before 0.9.13.
- CVE-2020-14295A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter.
- CVE-2020-12827MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.mjml
- CVE-2020-13224TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC23
- CVE-2020-11914The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
- CVE-2020-11913The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
- CVE-2020-11912The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
- CVE-2020-11911The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
- CVE-2020-11908The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.
- CVE-2020-11907The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.
- CVE-2020-11906The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.
- CVE-2020-11905The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
- CVE-2020-11904The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.
- CVE-2020-11903The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
- CVE-2020-11902The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
- CVE-2020-11901The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
- CVE-2020-11900The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
- CVE-2020-11899The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
- CVE-2020-11898The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers
- CVE-2020-11897The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.
- CVE-2020-11896The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.