CVEs published June 23, 2020
27 CVEs were published on June 23, 2020: 1 critical, 1 high.
- Published
- 27
- Critical
- 1
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- nukeviet/nukeviet
- 3
- Apache Software Foundation Apache Spark · pyspark +1
- 1
- Atlassian Jira Server
- 1
- Atlassian Jira Server and Data Center
- 1
- Dell Unisphere for PowerMax
- 1
- Dell Unisphere for PowerMax, Unisphere for PowerMax Virtual…
- 1
- IBM Security Guardium
- 1
- LoRaMac-node
- 1
- Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series…
- 1
- Openfind MailGates · Openfind MailAudit
- 1
Critical 1
High 1
Medium, low and unrated 25
- CVE-2020-9480In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) vApache Software Foundation Apache Spark · pyspark +1
- CVE-2020-12033In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied idRockwell Automation FactoryTalk Services Platform
- CVE-2020-12021In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attOSIsoft PI Web API
- CVE-2020-5345Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, anDell Unisphere for PowerMax
- CVE-2020-13155clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clnukeviet/nukeviet
- CVE-2020-13156modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.nukeviet/nukeviet
- CVE-2020-13157modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI.nukeviet/nukeviet
- CVE-2020-14073XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties.
- CVE-2020-14974The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold
- CVE-2020-14975The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.
- CVE-2020-14976GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handl
- CVE-2020-14977An issue was discovered in F-Secure SAFE 17.7 on macOS.
- CVE-2020-14978An issue was discovered in F-Secure SAFE 17.7 on macOS.
- CVE-2020-4188IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbIBM Security Guardium
- CVE-2020-11068Potential Buffer Overflow in LoRaMac-nodeLoRaMac-node
- CVE-2020-9438Tinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock request that occurred when the attacker was
- CVE-2020-14971Pi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by modifying Teleporter backup files and then resto
- CVE-2020-14965On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML conte
- CVE-2020-4028Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in somAtlassian Jira Server and Data Center
- CVE-2020-14993A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbit
- CVE-2020-14938An issue was discovered in map.c in FreedroidRPG 1.0rc2.
- CVE-2020-14939An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2.
- CVE-2020-14940An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4.
- CVE-2020-5594Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmissiMitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series…
- CVE-2019-20409The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gaAtlassian Jira Server