# CVEs published 2020-06-18

84 CVEs were published on June 18, 2020: 13 critical, 27 high. Days are UTC.

- [CVE-2020-4059](https://cve.now/CVE-2020-4059.md): Command Injection in mversion (CVSS 7.3, mikaelbr mversion · mversion)
- [CVE-2020-12883](https://cve.now/CVE-2020-12883.md): Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. (no CVSS)
- [CVE-2020-12884](https://cve.now/CVE-2020-12884.md): A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. (no CVSS)
- [CVE-2020-12885](https://cve.now/CVE-2020-12885.md): An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. (no CVSS)
- [CVE-2020-12886](https://cve.now/CVE-2020-12886.md): A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. (no CVSS)
- [CVE-2020-12887](https://cve.now/CVE-2020-12887.md): Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. (no CVSS)
- [CVE-2020-14444](https://cve.now/CVE-2020-14444.md): An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. (CVSS 5.4)
- [CVE-2020-14445](https://cve.now/CVE-2020-14445.md): An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. (CVSS 4.4)
- [CVE-2020-14446](https://cve.now/CVE-2020-14446.md): An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0. (CVSS 6.1)
- [CVE-2020-13882](https://cve.now/CVE-2020-13882.md): CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. (no CVSS)
- [CVE-2019-13033](https://cve.now/CVE-2019-13033.md): In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. (no CVSS)
- [CVE-2020-14443](https://cve.now/CVE-2020-14443.md): A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL (no CVSS, dolibarr/dolibarr)
- [CVE-2020-14442](https://cve.now/CVE-2020-14442.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14441](https://cve.now/CVE-2020-14441.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14440](https://cve.now/CVE-2020-14440.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14439](https://cve.now/CVE-2020-14439.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14438](https://cve.now/CVE-2020-14438.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14437](https://cve.now/CVE-2020-14437.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14436](https://cve.now/CVE-2020-14436.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2020-14435](https://cve.now/CVE-2020-14435.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 6.8)
- [CVE-2020-14434](https://cve.now/CVE-2020-14434.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.4)
- [CVE-2020-14433](https://cve.now/CVE-2020-14433.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.4)
- [CVE-2020-14432](https://cve.now/CVE-2020-14432.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.4)
- [CVE-2020-14431](https://cve.now/CVE-2020-14431.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-14430](https://cve.now/CVE-2020-14430.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-14429](https://cve.now/CVE-2020-14429.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-14428](https://cve.now/CVE-2020-14428.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-14427](https://cve.now/CVE-2020-14427.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-14426](https://cve.now/CVE-2020-14426.md): Certain NETGEAR devices are affected by disclosure of administrative credentials. (CVSS 9.6)
- [CVE-2020-11503](https://cve.now/CVE-2020-11503.md): A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run a (no CVSS)
- [CVE-2017-9103](https://cve.now/CVE-2017-9103.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2017-9104](https://cve.now/CVE-2017-9104.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2020-13640](https://cve.now/CVE-2020-13640.md): A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2020-1834](https://cve.now/CVE-2020-1834.md): HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an (no CVSS, HUAWEI P30;HUAWEI P30 Pro)
- [CVE-2020-9225](https://cve.now/CVE-2020-9225.md): FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. (no CVSS, FusionSphere OpenStack)
- [CVE-2020-1835](https://cve.now/CVE-2020-1835.md): HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-14423](https://cve.now/CVE-2020-14423.md): Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. (no CVSS)
- [CVE-2017-9105](https://cve.now/CVE-2017-9105.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2017-9106](https://cve.now/CVE-2017-9106.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2017-9107](https://cve.now/CVE-2017-9107.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2017-9108](https://cve.now/CVE-2017-9108.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2017-9109](https://cve.now/CVE-2017-9109.md): An issue was discovered in adns before 1.5.2. (no CVSS)
- [CVE-2020-14421](https://cve.now/CVE-2020-14421.md): aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen. (no CVSS)
- [CVE-2020-10782](https://cve.now/CVE-2020-10782.md): An exposure of sensitive information flaw was found in Ansible version 3.7.0. (CVSS 6.5, Red Hat Ansible Tower)
- [CVE-2020-14416](https://cve.now/CVE-2020-14416.md): In the Linux kernel before 5.4.16, a race condition in tty-\>disc\_data handling in the slip and slcan line discipline could lead to a use-aft (no CVSS)
- [CVE-2020-3276](https://cve.now/CVE-2020-3276.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3275](https://cve.now/CVE-2020-3275.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3274](https://cve.now/CVE-2020-3274.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3269](https://cve.now/CVE-2020-3269.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities (CVSS 7.2, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3268](https://cve.now/CVE-2020-3268.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities (CVSS 7.2, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3263](https://cve.now/CVE-2020-3263.md): Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution Vulnerability (CVSS 7.5, Cisco WebEx Meetings Server)
- [CVE-2020-3245](https://cve.now/CVE-2020-3245.md): Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability (CVSS 5.3, Cisco Smart Software Manager On-Prem)
- [CVE-2020-3244](https://cve.now/CVE-2020-3244.md): Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability (CVSS 5.3, Cisco ASR 5000 Series Software)
- [CVE-2020-3242](https://cve.now/CVE-2020-3242.md): Cisco UCS Director Information Disclosure Vulnerability (CVSS 4.9, Cisco Unified Computing System)
- [CVE-2020-3241](https://cve.now/CVE-2020-3241.md): Cisco UCS Director Path Traversal Vulnerability (CVSS 6.5, Cisco Unified Computing System)
- [CVE-2020-3236](https://cve.now/CVE-2020-3236.md): Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (CVSS 6.7, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2020-3368](https://cve.now/CVE-2020-3368.md): Cisco Email Security Appliance URL Filtering Bypass Vulnerability (CVSS 5.8, Cisco Email Security Appliance)
- [CVE-2020-3364](https://cve.now/CVE-2020-3364.md): Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2020-3362](https://cve.now/CVE-2020-3362.md): Cisco Network Services Orchestrator Information Disclosure Vulnerability (CVSS 4.7, Cisco Network Services Orchestrator)
- [CVE-2020-3361](https://cve.now/CVE-2020-3361.md): Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability (CVSS 8.1, Cisco WebEx Meetings Server)
- [CVE-2020-3360](https://cve.now/CVE-2020-3360.md): Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure Vulnerability (CVSS 5.3, Cisco IP Phone 8800 Series Software)
- [CVE-2020-3356](https://cve.now/CVE-2020-3356.md): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Data Center Network Manager)
- [CVE-2020-3355](https://cve.now/CVE-2020-3355.md): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Data Center Network Manager)
- [CVE-2020-3354](https://cve.now/CVE-2020-3354.md): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Data Center Network Manager)
- [CVE-2020-3350](https://cve.now/CVE-2020-3350.md): Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability (CVSS 5.5, Cisco AMP for Endpoints)
- [CVE-2020-3347](https://cve.now/CVE-2020-3347.md): Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability (CVSS 5.5, Cisco WebEx Meetings Server)
- [CVE-2020-3342](https://cve.now/CVE-2020-3342.md): Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability (CVSS 8.8, Cisco WebEx Meetings Server)
- [CVE-2020-3337](https://cve.now/CVE-2020-3337.md): Cisco Umbrella Open Redirect Vulnerability (CVSS 4.7, Cisco Umbrella)
- [CVE-2020-3336](https://cve.now/CVE-2020-3336.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability (CVSS 7.2, Cisco TelePresence CE Software)
- [CVE-2020-3296](https://cve.now/CVE-2020-3296.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3295](https://cve.now/CVE-2020-3295.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3294](https://cve.now/CVE-2020-3294.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3293](https://cve.now/CVE-2020-3293.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3292](https://cve.now/CVE-2020-3292.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3291](https://cve.now/CVE-2020-3291.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3290](https://cve.now/CVE-2020-3290.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3289](https://cve.now/CVE-2020-3289.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3288](https://cve.now/CVE-2020-3288.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3287](https://cve.now/CVE-2020-3287.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3286](https://cve.now/CVE-2020-3286.md): Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3279](https://cve.now/CVE-2020-3279.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3278](https://cve.now/CVE-2020-3278.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3277](https://cve.now/CVE-2020-3277.md): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-14422](https://cve.now/CVE-2020-14422.md): Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a (no CVSS, libpython · python +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.