# CVEs published 2020-06-22

80 CVEs were published on June 22, 2020: 2 critical, 6 high. Days are UTC.

- [CVE-2020-14943](https://cve.now/CVE-2020-14943.md): The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XS (no CVSS)
- [CVE-2020-14944](https://cve.now/CVE-2020-14944.md): Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. (no CVSS)
- [CVE-2020-14945](https://cve.now/CVE-2020-14945.md): A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privi (no CVSS)
- [CVE-2020-14946](https://cve.now/CVE-2020-14946.md): downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users (no CVSS)
- [CVE-2020-14990](https://cve.now/CVE-2020-14990.md): IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize featu (no CVSS)
- [CVE-2020-12053](https://cve.now/CVE-2020-12053.md): In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authoriz (no CVSS)
- [CVE-2020-14983](https://cve.now/CVE-2020-14983.md): The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num\_players value, leading to a buffer overflo (no CVSS)
- [CVE-2020-11989](https://cve.now/CVE-2020-11989.md): Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication (no CVSS, Apache Software Foundation Apache Shiro · org.apache.shiro:…)
- [CVE-2019-14894](https://cve.now/CVE-2019-14894.md): A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execut (CVSS 8.0, \[UNKNOWN\] CloudForms)
- [CVE-2019-3865](https://cve.now/CVE-2019-3865.md): A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. (CVSS 4.7, \[UNKNOWN\] quay)
- [CVE-2020-10736](https://cve.now/CVE-2020-10736.md): An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not proper (CVSS 8.0, \[UNKNOWN\] ceph)
- [CVE-2020-11519](https://cve.now/CVE-2020-11519.md): The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\\\.\\Secure (no CVSS)
- [CVE-2020-11520](https://cve.now/CVE-2020-11520.md): The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the (no CVSS)
- [CVE-2020-1727](https://cve.now/CVE-2020-1727.md): A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation (CVSS 6.4, \[UNKNOWN\] keycloak)
- [CVE-2020-13158](https://cve.now/CVE-2020-13158.md): Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter. (no CVSS)
- [CVE-2020-10740](https://cve.now/CVE-2020-10740.md): A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Ap (CVSS 6.6, \[UNKNOWN\] wildfly · org.wildfly:wildfly-parent)
- [CVE-2020-14980](https://cve.now/CVE-2020-14980.md): The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation. (no CVSS)
- [CVE-2020-13159](https://cve.now/CVE-2020-13159.md): Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient\_mac, Hostna (no CVSS)
- [CVE-2020-14981](https://cve.now/CVE-2020-14981.md): The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation. (no CVSS)
- [CVE-2020-13427](https://cve.now/CVE-2020-13427.md): Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add\_user via the user\_name, user\_firstname, or user\_lastname parameter. (no CVSS)
- [CVE-2020-13480](https://cve.now/CVE-2020-13480.md): Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature. (no CVSS)
- [CVE-2020-14049](https://cve.now/CVE-2020-14049.md): Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. (no CVSS)
- [CVE-2020-14972](https://cve.now/CVE-2020-14972.md): Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass (no CVSS)
- [CVE-2020-14973](https://cve.now/CVE-2020-14973.md): The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via (no CVSS)
- [CVE-2020-13426](https://cve.now/CVE-2020-13426.md): The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the (no CVSS)
- [CVE-2020-4060](https://cve.now/CVE-2020-4060.md): Use After Free in in cups\_update\_info in LoRa Basics Station (CVSS 4.1, LoRa Basics Station)
- [CVE-2020-4070](https://cve.now/CVE-2020-4070.md): Cross-site Scripting in CSS Validator (CVSS 4.6, World Wide Web Consortium (W3C) CSS Validator)
- [CVE-2020-4068](https://cve.now/CVE-2020-4068.md): Heap-based Buffer Overflow in APNSwift (CVSS 6.3, kylebrowning APNSwift)
- [CVE-2020-13887](https://cve.now/CVE-2020-13887.md): documents\_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folde (no CVSS)
- [CVE-2020-4066](https://cve.now/CVE-2020-4066.md): Command Injection in Limdu trainBatch function (CVSS 3.8, erelsgl Limdu · limdu)
- [CVE-2020-6644](https://cve.now/CVE-2020-6644.md): An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user sessi (no CVSS, Fortinet FortiDeceptor)
- [CVE-2020-4062](https://cve.now/CVE-2020-4062.md): Improper Access Control in Conjur OSS Helm Chart (CVSS 8.7, CyberArk Conjur OSS Helm Chart)
- [CVE-2020-9288](https://cve.now/CVE-2020-9288.md): An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site sc (no CVSS, Fortinet FortiWLC)
- [CVE-2020-13279](https://cve.now/CVE-2020-13279.md): Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system (CVSS 8.6, gitlab-vscode-extension)
- [CVE-2020-13888](https://cve.now/CVE-2020-13888.md): Kordil EDMS through 2.2.60rc3 allows stored XSS in users\_edit.php, users\_management\_edit.php, and user\_management.php. (no CVSS)
- [CVE-2020-8933](https://cve.now/CVE-2020-8933.md): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (CVSS 9.3, Google guest-oslogin)
- [CVE-2020-8903](https://cve.now/CVE-2020-8903.md): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (CVSS 7.3, Google guest-oslogin)
- [CVE-2020-8907](https://cve.now/CVE-2020-8907.md): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (CVSS 9.3, Google guest-oslogin)
- [CVE-2020-14202](https://cve.now/CVE-2020-14202.md): WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters. (no CVSS)
- [CVE-2020-14204](https://cve.now/CVE-2020-14204.md): In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server (no CVSS)
- [CVE-2020-14203](https://cve.now/CVE-2020-14203.md): WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi\_apps (no CVSS)
- [CVE-2020-14461](https://cve.now/CVE-2020-14461.md): Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI. (no CVSS)
- [CVE-2020-14969](https://cve.now/CVE-2020-14969.md): app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. (no CVSS)
- [CVE-2020-14966](https://cve.now/CVE-2020-14966.md): An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. (no CVSS, jsrsasign)
- [CVE-2020-14968](https://cve.now/CVE-2020-14968.md): An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. (no CVSS, jsrsasign)
- [CVE-2020-14967](https://cve.now/CVE-2020-14967.md): An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. (no CVSS, jsrsasign)
- [CVE-2020-8102](https://cve.now/CVE-2020-8102.md): Insufficient URL sanitization and validation in Safepay Browser (VA-8631) (CVSS 8.8, Bitdefender Total Security)
- [CVE-2020-7262](https://cve.now/CVE-2020-7262.md): Improper Access Control vulnerability in ATD (CVSS 5.3, McAfee Advanced Threat Defense)
- [CVE-2020-3676](https://cve.now/CVE-2020-3676.md): Possible memory corruption in perfservice due to improper validation array length taken from user application. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-3663](https://cve.now/CVE-2020-3663.md): Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3665](https://cve.now/CVE-2020-3665.md): A possible buffer overflow would occur while processing command from firmware due to the group\_id obtained from the firmware being out of ra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3661](https://cve.now/CVE-2020-3661.md): Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX\_UINT32 range due to lack of validati (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3662](https://cve.now/CVE-2020-3662.md): Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3642](https://cve.now/CVE-2020-3642.md): Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of (no CVSS, Qualcomm Snapdragon Consumer IOT, Snapdragon Mobile)
- [CVE-2020-3658](https://cve.now/CVE-2020-3658.md): Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3660](https://cve.now/CVE-2020-3660.md): Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3628](https://cve.now/CVE-2020-3628.md): Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon (no CVSS, Qualcomm Snapdragon Consumer IOT, Snapdragon Mobile)
- [CVE-2020-3635](https://cve.now/CVE-2020-3635.md): Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3614](https://cve.now/CVE-2020-3614.md): Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3626](https://cve.now/CVE-2020-3626.md): Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14094](https://cve.now/CVE-2019-14094.md): Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3613](https://cve.now/CVE-2020-3613.md): Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon V (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Mobile, Snapdragon…)
- [CVE-2019-14080](https://cve.now/CVE-2019-14080.md): Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon C (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14091](https://cve.now/CVE-2019-14091.md): Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14092](https://cve.now/CVE-2019-14092.md): System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mo (no CVSS, Qualcomm Snapdragon Industrial IOT, Snapdragon Mobile)
- [CVE-2019-14073](https://cve.now/CVE-2019-14073.md): Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when p (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14076](https://cve.now/CVE-2019-14076.md): Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14047](https://cve.now/CVE-2019-14047.md): While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit l (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14062](https://cve.now/CVE-2019-14062.md): Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Aut (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10626](https://cve.now/CVE-2019-10626.md): Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Aut (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10597](https://cve.now/CVE-2019-10597.md): kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11095](https://cve.now/CVE-2020-11095.md): Global OOB read in update\_recv\_primary\_order in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-11096](https://cve.now/CVE-2020-11096.md): Global OOB read in update\_read\_cache\_bitmap\_v3\_order in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-11097](https://cve.now/CVE-2020-11097.md): OOB read in ntlm\_av\_pair\_get in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-11098](https://cve.now/CVE-2020-11098.md): Out-of-bound read in glyph\_cache\_put in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-11099](https://cve.now/CVE-2020-11099.md): OOB Read in license\_read\_new\_or\_upgrade\_license\_packet in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-4030](https://cve.now/CVE-2020-4030.md): OOB read in \`TrioParse\` in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-4031](https://cve.now/CVE-2020-4031.md): Use-After-Free in gdi\_SelectObject in FreeRDP (CVSS 3.5, FreeRDP)
- [CVE-2020-4032](https://cve.now/CVE-2020-4032.md): Integer casting vulnerability in \`update\_recv\_secondary\_order\` in FreeRDP (CVSS 3.1, FreeRDP)
- [CVE-2020-4033](https://cve.now/CVE-2020-4033.md): OOB Read in RLEDECOMPRESS in FreeRDP (CVSS 3.1, FreeRDP)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.