# CVEs published 2020-06-19

193 CVEs were published on June 19, 2020: 0 critical, 8 high. Days are UTC.

- [CVE-2020-13263](https://cve.now/CVE-2020-13263.md): An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allo (CVSS 7.5, GitLab)
- [CVE-2020-13264](https://cve.now/CVE-2020-13264.md): Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster (CVSS 5.3, GitLab)
- [CVE-2020-13261](https://cve.now/CVE-2020-13261.md): Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials v (CVSS 5.3, GitLab)
- [CVE-2020-13262](https://cve.now/CVE-2020-13262.md): Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload t (CVSS 6.1, GitLab)
- [CVE-2020-13275](https://cve.now/CVE-2020-13275.md): A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1 (CVSS 8.0, GitLab)
- [CVE-2020-13274](https://cve.now/CVE-2020-13274.md): A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitL (CVSS 7.5, GitLab)
- [CVE-2020-13273](https://cve.now/CVE-2020-13273.md): A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1 (CVSS 7.5, GitLab)
- [CVE-2020-13265](https://cve.now/CVE-2020-13265.md): User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification (CVSS 4.3, GitLab)
- [CVE-2020-13272](https://cve.now/CVE-2020-13272.md): OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow (CVSS 7.5, GitLab)
- [CVE-2020-13276](https://cve.now/CVE-2020-13276.md): User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 1 (CVSS 7.4, GitLab)
- [CVE-2020-14931](https://cve.now/CVE-2020-14931.md): A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary co (no CVSS)
- [CVE-2020-14930](https://cve.now/CVE-2020-14930.md): An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. (no CVSS)
- [CVE-2019-20891](https://cve.now/CVE-2019-20891.md): WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross (no CVSS, woocommerce/woocommerce)
- [CVE-2015-9548](https://cve.now/CVE-2015-9548.md): An issue was discovered in Mattermost Server before 1.2.0. (no CVSS)
- [CVE-2016-11084](https://cve.now/CVE-2016-11084.md): An issue was discovered in Mattermost Server before 2.1.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11083](https://cve.now/CVE-2016-11083.md): An issue was discovered in Mattermost Server before 2.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11082](https://cve.now/CVE-2016-11082.md): An issue was discovered in Mattermost Server before 2.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11081](https://cve.now/CVE-2016-11081.md): An issue was discovered in Mattermost Server before 2.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11080](https://cve.now/CVE-2016-11080.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11079](https://cve.now/CVE-2016-11079.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11078](https://cve.now/CVE-2016-11078.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11077](https://cve.now/CVE-2016-11077.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11076](https://cve.now/CVE-2016-11076.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11075](https://cve.now/CVE-2016-11075.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11074](https://cve.now/CVE-2016-11074.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11073](https://cve.now/CVE-2016-11073.md): An issue was discovered in Mattermost Server before 3.0.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11072](https://cve.now/CVE-2016-11072.md): An issue was discovered in Mattermost Server before 3.0.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11071](https://cve.now/CVE-2016-11071.md): An issue was discovered in Mattermost Server before 3.1.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11070](https://cve.now/CVE-2016-11070.md): An issue was discovered in Mattermost Server before 3.1.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11069](https://cve.now/CVE-2016-11069.md): An issue was discovered in Mattermost Server before 3.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11068](https://cve.now/CVE-2016-11068.md): An issue was discovered in Mattermost Server before 3.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11067](https://cve.now/CVE-2016-11067.md): An issue was discovered in Mattermost Server before 3.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11066](https://cve.now/CVE-2016-11066.md): An issue was discovered in Mattermost Server before 3.2.0. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2020-10750](https://cve.now/CVE-2020-10750.md): Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store (CVSS 7.1, the Jager project jaegertracing/jaeger · github.com/jaegert…)
- [CVE-2016-11065](https://cve.now/CVE-2016-11065.md): An issue was discovered in Mattermost Server before 3.3.0. (no CVSS)
- [CVE-2016-11064](https://cve.now/CVE-2016-11064.md): An issue was discovered in Mattermost Desktop App before 3.4.0. (no CVSS)
- [CVE-2016-11063](https://cve.now/CVE-2016-11063.md): An issue was discovered in Mattermost Server before 3.5.1. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2016-11062](https://cve.now/CVE-2016-11062.md): An issue was discovered in Mattermost Server before 3.5.1. (no CVSS)
- [CVE-2017-18921](https://cve.now/CVE-2017-18921.md): An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. (no CVSS)
- [CVE-2017-18920](https://cve.now/CVE-2017-18920.md): An issue was discovered in Mattermost Server before 3.6.2. (no CVSS)
- [CVE-2017-18919](https://cve.now/CVE-2017-18919.md): An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. (no CVSS)
- [CVE-2017-18918](https://cve.now/CVE-2017-18918.md): An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18907](https://cve.now/CVE-2017-18907.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18916](https://cve.now/CVE-2017-18916.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18917](https://cve.now/CVE-2017-18917.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18906](https://cve.now/CVE-2017-18906.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18905](https://cve.now/CVE-2017-18905.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidati (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18913](https://cve.now/CVE-2017-18913.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS)
- [CVE-2017-18908](https://cve.now/CVE-2017-18908.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18914](https://cve.now/CVE-2017-18914.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS)
- [CVE-2017-18915](https://cve.now/CVE-2017-18915.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2020-9495](https://cve.now/CVE-2020-9495.md): Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. (no CVSS, Apache Archiva · org.apache.archiva:archiva)
- [CVE-2020-14929](https://cve.now/CVE-2020-14929.md): Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is (no CVSS)
- [CVE-2017-18909](https://cve.now/CVE-2017-18909.md): An issue was discovered in Mattermost Server before 3.9.0 when SAML is used. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18910](https://cve.now/CVE-2017-18910.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS)
- [CVE-2017-18911](https://cve.now/CVE-2017-18911.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18912](https://cve.now/CVE-2017-18912.md): An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18904](https://cve.now/CVE-2017-18904.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18903](https://cve.now/CVE-2017-18903.md): An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18902](https://cve.now/CVE-2017-18902.md): An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18898](https://cve.now/CVE-2017-18898.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18900](https://cve.now/CVE-2017-18900.md): An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18886](https://cve.now/CVE-2017-18886.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18895](https://cve.now/CVE-2017-18895.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18880](https://cve.now/CVE-2017-18880.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS)
- [CVE-2017-18899](https://cve.now/CVE-2017-18899.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS)
- [CVE-2017-18887](https://cve.now/CVE-2017-18887.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18888](https://cve.now/CVE-2017-18888.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18893](https://cve.now/CVE-2017-18893.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18894](https://cve.now/CVE-2017-18894.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18896](https://cve.now/CVE-2017-18896.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18897](https://cve.now/CVE-2017-18897.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18885](https://cve.now/CVE-2017-18885.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18901](https://cve.now/CVE-2017-18901.md): An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18889](https://cve.now/CVE-2017-18889.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18890](https://cve.now/CVE-2017-18890.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18892](https://cve.now/CVE-2017-18892.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18891](https://cve.now/CVE-2017-18891.md): An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18884](https://cve.now/CVE-2017-18884.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18883](https://cve.now/CVE-2017-18883.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18882](https://cve.now/CVE-2017-18882.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS)
- [CVE-2017-18881](https://cve.now/CVE-2017-18881.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS)
- [CVE-2017-18879](https://cve.now/CVE-2017-18879.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18878](https://cve.now/CVE-2017-18878.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18874](https://cve.now/CVE-2017-18874.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18873](https://cve.now/CVE-2017-18873.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18872](https://cve.now/CVE-2017-18872.md): An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2018-21252](https://cve.now/CVE-2018-21252.md): An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. (no CVSS)
- [CVE-2018-21256](https://cve.now/CVE-2018-21256.md): An issue was discovered in Mattermost Server before 5.1. (no CVSS)
- [CVE-2018-21264](https://cve.now/CVE-2018-21264.md): An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. (no CVSS)
- [CVE-2020-3972](https://cve.now/CVE-2020-3972.md): VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) impl (no CVSS, VMware Tools for macOS)
- [CVE-2020-13277](https://cve.now/CVE-2020-13277.md): An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5 (CVSS 6.3, GitLab)
- [CVE-2020-8167](https://cve.now/CVE-2020-8167.md): A CSRF vulnerability exists in rails \<= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. (no CVSS, http://github.com/rails/rails · actionview)
- [CVE-2020-8165](https://cve.now/CVE-2020-8165.md): A deserialization of untrusted data vulnernerability exists in rails \< 5.2.4.3, rails \< 6.0.3.1 that can allow an attacker to unmarshal user (no CVSS, https://github.com/rails/rails · activesupport)
- [CVE-2020-8164](https://cve.now/CVE-2020-8164.md): A deserialization of untrusted data vulnerability exists in rails \< 5.2.4.3, rails \< 6.0.3.1 which can allow an attacker to supply informati (no CVSS, https://github.com/rails/rails · actionpack)
- [CVE-2020-14926](https://cve.now/CVE-2020-14926.md): CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page. (no CVSS)
- [CVE-2020-14927](https://cve.now/CVE-2020-14927.md): Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites \> Create \> Aliases \> Add" screen. (no CVSS)
- [CVE-2020-8162](https://cve.now/CVE-2020-8162.md): A client side enforcement of server side security vulnerability exists in rails \< 5.2.4.2 and rails \< 6.0.3.1 ActiveStorage's S3 adapter tha (no CVSS, https://github.com/rails/rails · activestorage)
- [CVE-2018-21257](https://cve.now/CVE-2018-21257.md): An issue was discovered in Mattermost Server before 5.1. (no CVSS)
- [CVE-2018-21261](https://cve.now/CVE-2018-21261.md): An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. (no CVSS)
- [CVE-2018-21262](https://cve.now/CVE-2018-21262.md): An issue was discovered in Mattermost Server before 4.7.3. (no CVSS)
- [CVE-2018-21265](https://cve.now/CVE-2018-21265.md): An issue was discovered in Mattermost Desktop App before 4.0.0. (no CVSS)
- [CVE-2017-18871](https://cve.now/CVE-2017-18871.md): An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2018-21250](https://cve.now/CVE-2018-21250.md): An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. (no CVSS)
- [CVE-2017-18877](https://cve.now/CVE-2017-18877.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18876](https://cve.now/CVE-2017-18876.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2018-21255](https://cve.now/CVE-2018-21255.md): An issue was discovered in Mattermost Server before 5.1. (no CVSS)
- [CVE-2018-21254](https://cve.now/CVE-2018-21254.md): An issue was discovered in Mattermost Server before 5.1. (no CVSS)
- [CVE-2018-21260](https://cve.now/CVE-2018-21260.md): An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. (no CVSS)
- [CVE-2018-21251](https://cve.now/CVE-2018-21251.md): An issue was discovered in Mattermost Server before 5.2 and 5.1.1. (no CVSS)
- [CVE-2018-21249](https://cve.now/CVE-2018-21249.md): An issue was discovered in Mattermost Server before 5.3.0. (no CVSS)
- [CVE-2017-18875](https://cve.now/CVE-2017-18875.md): An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2017-18870](https://cve.now/CVE-2017-18870.md): An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. (no CVSS, github.com/mattermost/mattermost-server)
- [CVE-2018-21259](https://cve.now/CVE-2018-21259.md): An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. (no CVSS)
- [CVE-2019-20889](https://cve.now/CVE-2019-20889.md): An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. (no CVSS)
- [CVE-2018-21248](https://cve.now/CVE-2018-21248.md): An issue was discovered in Mattermost Server before 5.4.0. (no CVSS)
- [CVE-2019-20888](https://cve.now/CVE-2019-20888.md): An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. (no CVSS)
- [CVE-2019-20886](https://cve.now/CVE-2019-20886.md): An issue was discovered in Mattermost Server before 5.8.0. (no CVSS)
- [CVE-2018-21263](https://cve.now/CVE-2018-21263.md): An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. (no CVSS)
- [CVE-2018-21258](https://cve.now/CVE-2018-21258.md): An issue was discovered in Mattermost Server before 5.1. (no CVSS, github.com/mattermost/mattermost-server · github.com/matter…)
- [CVE-2018-21253](https://cve.now/CVE-2018-21253.md): An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. (no CVSS)
- [CVE-2019-20890](https://cve.now/CVE-2019-20890.md): An issue was discovered in Mattermost Server before 5.7. (no CVSS)
- [CVE-2019-20884](https://cve.now/CVE-2019-20884.md): An issue was discovered in Mattermost Server before 5.8.0. (no CVSS)
- [CVE-2019-20887](https://cve.now/CVE-2019-20887.md): An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. (no CVSS)
- [CVE-2019-20885](https://cve.now/CVE-2019-20885.md): An issue was discovered in Mattermost Server before 5.8.0. (no CVSS)
- [CVE-2019-20883](https://cve.now/CVE-2019-20883.md): An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. (no CVSS)
- [CVE-2019-20882](https://cve.now/CVE-2019-20882.md): An issue was discovered in Mattermost Server before 5.8.0. (no CVSS)
- [CVE-2020-13961](https://cve.now/CVE-2020-13961.md): Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global var (no CVSS, strapi)
- [CVE-2019-20881](https://cve.now/CVE-2019-20881.md): An issue was discovered in Mattermost Server before 5.8.0. (no CVSS)
- [CVE-2019-20878](https://cve.now/CVE-2019-20878.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20879](https://cve.now/CVE-2019-20879.md): An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. (no CVSS)
- [CVE-2019-20880](https://cve.now/CVE-2019-20880.md): An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. (no CVSS)
- [CVE-2019-20877](https://cve.now/CVE-2019-20877.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20876](https://cve.now/CVE-2019-20876.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20875](https://cve.now/CVE-2019-20875.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2020-14475](https://cve.now/CVE-2020-14475.md): A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into (no CVSS, dolibarr/dolibarr)
- [CVE-2020-4297](https://cve.now/CVE-2020-4297.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2020-4295](https://cve.now/CVE-2020-4295.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2020-4281](https://cve.now/CVE-2020-4281.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2019-20874](https://cve.now/CVE-2019-20874.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20873](https://cve.now/CVE-2019-20873.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20872](https://cve.now/CVE-2019-20872.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20871](https://cve.now/CVE-2019-20871.md): An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. (no CVSS)
- [CVE-2019-20870](https://cve.now/CVE-2019-20870.md): An issue was discovered in Mattermost Server before 5.10.0. (no CVSS)
- [CVE-2019-20869](https://cve.now/CVE-2019-20869.md): An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. (no CVSS)
- [CVE-2019-20868](https://cve.now/CVE-2019-20868.md): An issue was discovered in Mattermost Server before 5.11.0. (no CVSS)
- [CVE-2019-20867](https://cve.now/CVE-2019-20867.md): An issue was discovered in Mattermost Server before 5.11.0. (no CVSS)
- [CVE-2019-20866](https://cve.now/CVE-2019-20866.md): An issue was discovered in Mattermost Server before 5.12.0. (no CVSS)
- [CVE-2019-20865](https://cve.now/CVE-2019-20865.md): An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. (no CVSS)
- [CVE-2020-14470](https://cve.now/CVE-2020-14470.md): In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart (no CVSS)
- [CVE-2019-20864](https://cve.now/CVE-2019-20864.md): An issue was discovered in Mattermost Plugins before 5.13.0. (no CVSS)
- [CVE-2019-20863](https://cve.now/CVE-2019-20863.md): An issue was discovered in Mattermost Server before 5.13.0. (no CVSS)
- [CVE-2019-20862](https://cve.now/CVE-2019-20862.md): An issue was discovered in Mattermost Server before 5.13.0. (no CVSS)
- [CVE-2019-20861](https://cve.now/CVE-2019-20861.md): An issue was discovered in Mattermost Desktop App before 4.2.2. (no CVSS)
- [CVE-2019-20860](https://cve.now/CVE-2019-20860.md): An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. (no CVSS)
- [CVE-2019-20859](https://cve.now/CVE-2019-20859.md): An issue was discovered in Mattermost Server before 5.15.0. (no CVSS)
- [CVE-2019-20858](https://cve.now/CVE-2019-20858.md): An issue was discovered in Mattermost Server before 5.15.0. (no CVSS)
- [CVE-2019-20857](https://cve.now/CVE-2019-20857.md): An issue was discovered in Mattermost Server before 5.16.0. (no CVSS)
- [CVE-2019-20856](https://cve.now/CVE-2019-20856.md): An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. (no CVSS)
- [CVE-2019-20855](https://cve.now/CVE-2019-20855.md): An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. (no CVSS)
- [CVE-2019-20854](https://cve.now/CVE-2019-20854.md): An issue was discovered in Mattermost Server before 5.17.0. (no CVSS)
- [CVE-2019-20853](https://cve.now/CVE-2019-20853.md): An issue was discovered in Mattermost Packages before 5.16.3. (no CVSS)
- [CVE-2019-20852](https://cve.now/CVE-2019-20852.md): An issue was discovered in Mattermost Mobile Apps before 1.26.0. (no CVSS)
- [CVE-2019-20851](https://cve.now/CVE-2019-20851.md): An issue was discovered in Mattermost Mobile Apps before 1.26.0. (no CVSS)
- [CVE-2019-20850](https://cve.now/CVE-2019-20850.md): An issue was discovered in Mattermost Mobile Apps before 1.26.0. (no CVSS)
- [CVE-2019-20849](https://cve.now/CVE-2019-20849.md): An issue was discovered in Mattermost Mobile Apps before 1.26.0. (no CVSS)
- [CVE-2019-20848](https://cve.now/CVE-2019-20848.md): An issue was discovered in Mattermost Mobile Apps before 1.26.0. (no CVSS)
- [CVE-2019-20847](https://cve.now/CVE-2019-20847.md): An issue was discovered in Mattermost Server before 5.18.0. (no CVSS)
- [CVE-2019-20846](https://cve.now/CVE-2019-20846.md): An issue was discovered in Mattermost Server before 5.18.0. (no CVSS)
- [CVE-2019-20845](https://cve.now/CVE-2019-20845.md): An issue was discovered in Mattermost Server before 5.18.0. (no CVSS)
- [CVE-2019-20844](https://cve.now/CVE-2019-20844.md): An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. (no CVSS)
- [CVE-2019-20843](https://cve.now/CVE-2019-20843.md): An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. (no CVSS)
- [CVE-2019-20842](https://cve.now/CVE-2019-20842.md): An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. (no CVSS)
- [CVE-2019-20841](https://cve.now/CVE-2019-20841.md): An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. (no CVSS)
- [CVE-2020-14460](https://cve.now/CVE-2020-14460.md): An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. (no CVSS)
- [CVE-2020-14459](https://cve.now/CVE-2020-14459.md): An issue was discovered in Mattermost Server before 5.19.0. (no CVSS)
- [CVE-2020-14458](https://cve.now/CVE-2020-14458.md): An issue was discovered in Mattermost Server before 5.19.0. (no CVSS)
- [CVE-2020-14457](https://cve.now/CVE-2020-14457.md): An issue was discovered in Mattermost Server before 5.20.0. (no CVSS, github.com/mattermost/mattermost · github.com/mattermost… +1)
- [CVE-2020-14456](https://cve.now/CVE-2020-14456.md): An issue was discovered in Mattermost Desktop App before 4.4.0. (no CVSS)
- [CVE-2020-14455](https://cve.now/CVE-2020-14455.md): An issue was discovered in Mattermost Desktop App before 4.4.0. (no CVSS)
- [CVE-2020-14454](https://cve.now/CVE-2020-14454.md): An issue was discovered in Mattermost Desktop App before 4.4.0. (no CVSS)
- [CVE-2020-14453](https://cve.now/CVE-2020-14453.md): An issue was discovered in Mattermost Server before 5.21.0. (no CVSS)
- [CVE-2020-14452](https://cve.now/CVE-2020-14452.md): An issue was discovered in Mattermost Server before 5.21.0. (no CVSS)
- [CVE-2020-14451](https://cve.now/CVE-2020-14451.md): An issue was discovered in Mattermost Mobile Apps before 1.29.0. (no CVSS)
- [CVE-2020-14450](https://cve.now/CVE-2020-14450.md): An issue was discovered in Mattermost Server before 5.22.0. (no CVSS)
- [CVE-2020-14449](https://cve.now/CVE-2020-14449.md): An issue was discovered in Mattermost Mobile Apps before 1.30.0. (no CVSS)
- [CVE-2020-14448](https://cve.now/CVE-2020-14448.md): An issue was discovered in Mattermost Server before 5.23.0. (no CVSS)
- [CVE-2020-14447](https://cve.now/CVE-2020-14447.md): An issue was discovered in Mattermost Server before 5.23.0. (no CVSS)
- [CVE-2020-14462](https://cve.now/CVE-2020-14462.md): CALDERA 2.7.0 allows XSS via the Operation Name box. (no CVSS)
- [CVE-2020-14019](https://cve.now/CVE-2020-14019.md): Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is (no CVSS, rtslib-fb)
- [CVE-2020-7679](https://cve.now/CVE-2020-7679.md): Prototype Pollution (CVSS 7.3, casperjs)
- [CVE-2020-5590](https://cve.now/CVE-2020-5590.md): Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary fi (no CVSS, EC-CUBE CO. EC-CUBE · ec-cube/ec-cube)
- [CVE-2020-8184](https://cve.now/CVE-2020-8184.md): A reliance on cookies without validation/integrity check security vulnerability exists in rack \< 2.2.3, rack \< 2.1.4 that makes it is possib (no CVSS, https://github.com/rack/rack · rack)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.