CVEs published June 22, 2020
80 CVEs were published on June 22, 2020: 2 critical, 6 high.
- Published
- 80
- Critical
- 2
- High
- 6
- Medium
- 7
- Low
- 10
- Unrated
- 55
- Now in CISA KEV
- 0
- Fix available
- 22
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 18
- FreeRDP
- 9
- Google guest-oslogin
- 3
- jsrsasign
- 3
- Qualcomm Snapdragon Consumer IOT, Snapdragon Mobile
- 2
- [UNKNOWN] ceph
- 1
- [UNKNOWN] CloudForms
- 1
- [UNKNOWN] keycloak
- 1
- [UNKNOWN] quay
- 1
- [UNKNOWN] wildfly · org.wildfly:wildfly-parent
- 1
Critical 2
High 6
- CVE-2019-14894A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execut[UNKNOWN] CloudForms
- CVE-2020-10736An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not proper[UNKNOWN] ceph
- CVE-2020-4062Improper Access Control in Conjur OSS Helm ChartCyberArk Conjur OSS Helm Chart
- CVE-2020-13279Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user systemgitlab-vscode-extension
- CVE-2020-8903Priviged Escalation in Google Cloud Platform's Guest-OSLoginGoogle guest-oslogin
- CVE-2020-8102Insufficient URL sanitization and validation in Safepay Browser (VA-8631)Bitdefender Total Security
Medium, low and unrated 72
- CVE-2020-14943The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XS
- CVE-2020-14944Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions.
- CVE-2020-14945A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privi
- CVE-2020-14946downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users
- CVE-2020-14990IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize featu
- CVE-2020-12053In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authoriz
- CVE-2020-14983The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflo
- CVE-2020-11989Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication Apache Software Foundation Apache Shiro · org.apache.shiro:…
- CVE-2019-3865A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay.[UNKNOWN] quay
- CVE-2020-11519The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\Secure
- CVE-2020-11520The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the
- CVE-2020-1727A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation[UNKNOWN] keycloak
- CVE-2020-13158Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
- CVE-2020-10740A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Ap[UNKNOWN] wildfly · org.wildfly:wildfly-parent
- CVE-2020-14980The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
- CVE-2020-13159Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostna
- CVE-2020-14981The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation.
- CVE-2020-13427Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter.
- CVE-2020-13480Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.
- CVE-2020-14049Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler.
- CVE-2020-14972Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass
- CVE-2020-14973The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via
- CVE-2020-13426The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the
- CVE-2020-4060Use After Free in in cups_update_info in LoRa Basics StationLoRa Basics Station
- CVE-2020-4070Cross-site Scripting in CSS ValidatorWorld Wide Web Consortium (W3C) CSS Validator
- CVE-2020-4068Heap-based Buffer Overflow in APNSwiftkylebrowning APNSwift
- CVE-2020-13887documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folde
- CVE-2020-4066Command Injection in Limdu trainBatch functionerelsgl Limdu · limdu
- CVE-2020-6644An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user sessiFortinet FortiDeceptor
- CVE-2020-9288An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scFortinet FortiWLC
- CVE-2020-13888Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php.
- CVE-2020-14202WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.
- CVE-2020-14204In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server
- CVE-2020-14203WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps
- CVE-2020-14461Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.
- CVE-2020-14969app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations.
- CVE-2020-14966An issue was discovered in the jsrsasign package through 8.0.18 for Node.js.jsrsasign
- CVE-2020-14968An issue was discovered in the jsrsasign package before 8.0.17 for Node.js.jsrsasign
- CVE-2020-14967An issue was discovered in the jsrsasign package before 8.0.18 for Node.js.jsrsasign
- CVE-2020-7262Improper Access Control vulnerability in ATDMcAfee Advanced Threat Defense
- CVE-2020-3676Possible memory corruption in perfservice due to improper validation array length taken from user application.Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-3663Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3665A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of raQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3661Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validatiQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3662Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3642Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy ofQualcomm Snapdragon Consumer IOT, Snapdragon Mobile
- CVE-2020-3658Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3660Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3628Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Qualcomm Snapdragon Consumer IOT, Snapdragon Mobile
- CVE-2020-3635Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3614Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3626Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14094Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3613Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon VQualcomm Snapdragon Compute, Snapdragon Mobile, Snapdragon…
- CVE-2019-14080Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14091Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14092System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon MoQualcomm Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2019-14073Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when pQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14076Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14047While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit lQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-14062Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon AutQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10626Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon AutQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10597kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11095Global OOB read in update_recv_primary_order in FreeRDPFreeRDP
- CVE-2020-11096Global OOB read in update_read_cache_bitmap_v3_order in FreeRDPFreeRDP
- CVE-2020-11097OOB read in ntlm_av_pair_get in FreeRDPFreeRDP
- CVE-2020-11098Out-of-bound read in glyph_cache_put in FreeRDPFreeRDP
- CVE-2020-11099OOB Read in license_read_new_or_upgrade_license_packet in FreeRDPFreeRDP
- CVE-2020-4030OOB read in `TrioParse` in FreeRDPFreeRDP
- CVE-2020-4031Use-After-Free in gdi_SelectObject in FreeRDPFreeRDP
- CVE-2020-4032Integer casting vulnerability in `update_recv_secondary_order` in FreeRDPFreeRDP
- CVE-2020-4033OOB Read in RLEDECOMPRESS in FreeRDPFreeRDP