CVEs published June 18, 2020
84 CVEs were published on June 18, 2020: 13 critical, 27 high.
- Published
- 84
- Critical
- 13
- High
- 27
- Medium
- 20
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Cisco Small Business RV Series Router Firmware
- 17
- Cisco WebEx Meetings Server
- 4
- Cisco Data Center Network Manager
- 3
- Cisco RV130W Wireless-N Multifunction VPN Router Firmware
- 2
- Cisco Unified Computing System
- 2
- Cisco AMP for Endpoints
- 1
- Cisco ASR 5000 Series Software
- 1
- Cisco Email Security Appliance
- 1
- Cisco Enterprise NFV Infrastructure Software
- 1
- Cisco IOS XR Software
- 1
Critical 13
- CVE-2020-14442Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14441Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14440Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14439Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14438Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14437Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14436Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-14431Certain NETGEAR devices are affected by disclosure of administrative credentials.
- CVE-2020-14430Certain NETGEAR devices are affected by disclosure of administrative credentials.
- CVE-2020-14429Certain NETGEAR devices are affected by disclosure of administrative credentials.
- CVE-2020-14428Certain NETGEAR devices are affected by disclosure of administrative credentials.
- CVE-2020-14427Certain NETGEAR devices are affected by disclosure of administrative credentials.
- CVE-2020-14426Certain NETGEAR devices are affected by disclosure of administrative credentials.
High 27
- CVE-2020-4059Command Injection in mversionmikaelbr mversion · mversion
- CVE-2020-14434Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2020-14433Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2020-14432Certain NETGEAR devices are affected by CSRF.
- CVE-2020-3276Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3275Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3274Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3269Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-3268Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-3263Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution VulnerabilityCisco WebEx Meetings Server
- CVE-2020-3361Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access VulnerabilityCisco WebEx Meetings Server
- CVE-2020-3342Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution VulnerabilityCisco WebEx Meetings Server
- CVE-2020-3336Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection VulnerabilityCisco TelePresence CE Software
- CVE-2020-3296Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3295Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3294Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3293Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3292Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3291Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3290Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3289Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3288Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3287Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3286Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3279Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3278Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3277Cisco Small Business RV Series Routers Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
Medium, low and unrated 44
- CVE-2020-12883Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3.
- CVE-2020-12884A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3.
- CVE-2020-12885An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3.
- CVE-2020-12886A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3.
- CVE-2020-12887Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5.
- CVE-2020-14444An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0.
- CVE-2020-14445An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0.
- CVE-2020-14446An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0.
- CVE-2020-13882CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition.
- CVE-2019-13033In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed.
- CVE-2020-14443A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQLdolibarr/dolibarr
- CVE-2020-14435Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-11503A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run a
- CVE-2017-9103An issue was discovered in adns before 1.5.2.
- CVE-2017-9104An issue was discovered in adns before 1.5.2.
- CVE-2020-13640A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL comma
- CVE-2020-1834HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an HUAWEI P30;HUAWEI P30 Pro
- CVE-2020-9225FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability.FusionSphere OpenStack
- CVE-2020-1835HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability.HUAWEI Mate
- CVE-2020-14423Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm.
- CVE-2017-9105An issue was discovered in adns before 1.5.2.
- CVE-2017-9106An issue was discovered in adns before 1.5.2.
- CVE-2017-9107An issue was discovered in adns before 1.5.2.
- CVE-2017-9108An issue was discovered in adns before 1.5.2.
- CVE-2017-9109An issue was discovered in adns before 1.5.2.
- CVE-2020-14421aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.
- CVE-2020-10782An exposure of sensitive information flaw was found in Ansible version 3.7.0.Red Hat Ansible Tower
- CVE-2020-14416In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-aft
- CVE-2020-3245Cisco Smart Software Manager On-Prem Improper Access Control VulnerabilityCisco Smart Software Manager On-Prem
- CVE-2020-3244Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass VulnerabilityCisco ASR 5000 Series Software
- CVE-2020-3242Cisco UCS Director Information Disclosure VulnerabilityCisco Unified Computing System
- CVE-2020-3241Cisco UCS Director Path Traversal VulnerabilityCisco Unified Computing System
- CVE-2020-3236Cisco Enterprise NFV Infrastructure Software Path Traversal VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2020-3368Cisco Email Security Appliance URL Filtering Bypass VulnerabilityCisco Email Security Appliance
- CVE-2020-3364Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass VulnerabilityCisco IOS XR Software
- CVE-2020-3362Cisco Network Services Orchestrator Information Disclosure VulnerabilityCisco Network Services Orchestrator
- CVE-2020-3360Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure VulnerabilityCisco IP Phone 8800 Series Software
- CVE-2020-3356Cisco Data Center Network Manager Stored Cross-Site Scripting VulnerabilityCisco Data Center Network Manager
- CVE-2020-3355Cisco Data Center Network Manager Stored Cross-Site Scripting VulnerabilityCisco Data Center Network Manager
- CVE-2020-3354Cisco Data Center Network Manager Stored Cross-Site Scripting VulnerabilityCisco Data Center Network Manager
- CVE-2020-3350Cisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCisco AMP for Endpoints
- CVE-2020-3347Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure VulnerabilityCisco WebEx Meetings Server
- CVE-2020-3337Cisco Umbrella Open Redirect VulnerabilityCisco Umbrella
- CVE-2020-14422Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow alibpython · python +1