CVEs published June 24, 2020
65 CVEs were published on June 24, 2020: 7 critical, 4 high.
- Published
- 65
- Critical
- 7
- High
- 4
- Medium
- 7
- Low
- 3
- Unrated
- 44
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Mobile Industrial Robots A/S MiR100
- 12
- IBM Security Secret Server
- 6
- VMware ESXi · VMware Workstation +1
- 2
- Xiaomi router R3600
- 2
- airesvsg/acf-to-rest-api
- 1
- Apache Software Foundation Apache Traffic Server
- 1
- github.com/sassoftware/go-rpmutils/cpio · github.com/sassof…
- 1
- GleamTech.FileUltimate
- 1
- mediawiki/core
- 1
- NVIDIA GPU Display Driver
- 1
Critical 7
- CVE-2020-10279RVD#2569: Insecure operating system defaults in MiR robotsMobile Industrial Robots A/S MiR100
- CVE-2020-10269RVD#2566: Hardcoded Credentials on MiRX00 wireless Access PointMobile Industrial Robots A/S MiR100
- CVE-2020-10275RVD#2565: Weak token generation for the REST API.Mobile Industrial Robots A/S MiR100
- CVE-2020-10270RVD#2557: Hardcoded Credentials on MiRX00 Control DashboardMobile Industrial Robots A/S MiR100
- CVE-2020-10276RVD#2558: Default credentials on SICK PLC allows disabling safety featuresMobile Industrial Robots A/S MiR100
- CVE-2020-10271RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired onesMobile Industrial Robots A/S MiR100
- CVE-2020-10272RVD#2554: MiR ROS computational graph presents no authentication mechanismsMobile Industrial Robots A/S MiR100
High 4
- CVE-2020-7667Arbitrary File Write via Archive Extraction (Zip Slip)github.com/sassoftware/go-rpmutils/cpio · github.com/sassof…
- CVE-2020-10280RVD#2568: Apache server is vulnerable to a DoSMobile Industrial Robots A/S MiR100
- CVE-2020-10273RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllersMobile Industrial Robots A/S MiR100
- CVE-2020-10274RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)Mobile Industrial Robots A/S MiR100
Medium, low and unrated 54
- CVE-2020-15046The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confi
- CVE-2020-15005In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_amediawiki/core
- CVE-2020-15041PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
- CVE-2020-5962NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with lNVIDIA GPU Display Driver
- CVE-2020-15038The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
- CVE-2020-13247BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the a
- CVE-2020-15026Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/pl
- CVE-2020-13248BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx
- CVE-2020-15025ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by send
- CVE-2020-14472On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction
- CVE-2020-14473Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.
- CVE-2020-10561An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138.
- CVE-2020-11961Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result witho
- CVE-2020-11960Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to ex
- CVE-2020-11959An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.
- CVE-2020-3962VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3969VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-14094In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow orXiaomi router R3600
- CVE-2020-6870The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability.ZTE NetNumenU31R20
- CVE-2020-9494Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cApache Software Foundation Apache Traffic Server
- CVE-2020-14095In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to Xiaomi router R3600
- CVE-2020-13443ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment
- CVE-2020-13483The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.lis
- CVE-2020-13484Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the
- CVE-2020-13700An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress.airesvsg/acf-to-rest-api
- CVE-2020-14018An issue was discovered in Navigate CMS 2.9 r1433.
- CVE-2020-14017An issue was discovered in Navigate CMS 2.9 r1433.
- CVE-2020-14016An issue was discovered in Navigate CMS 2.9 r1433.
- CVE-2020-15015The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.GleamTech.FileUltimate
- CVE-2020-14015An issue was discovered in Navigate CMS 2.9 r1433.
- CVE-2020-14014An issue was discovered in Navigate CMS 2.8 and 2.9 r1433.
- CVE-2020-4413IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTPIBM Security Secret Server
- CVE-2020-4342IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user.IBM Security Secret Server
- CVE-2020-4341IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is retIBM Security Secret Server
- CVE-2020-4327IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is retIBM Security Secret Server
- CVE-2020-4323IBM Security Secret Server 10.7 is vulnerable to cross-site scripting.IBM Security Secret Server
- CVE-2020-4322IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim.IBM Security Secret Server
- CVE-2020-14005Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code
- CVE-2020-14006Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
- CVE-2020-14007Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
- CVE-2020-12862An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read
- CVE-2020-12863An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read
- CVE-2020-12864An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read
- CVE-2020-12865A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to exec
- CVE-2020-12866A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cau
- CVE-2020-15018playSMS through 1.4.3 is vulnerable to session fixation.
- CVE-2020-4071Timing attack on django-basic-auth-ip-whitelisttm-kn django-basic-auth-ip-whitelist · django-basic-auth-ip…
- CVE-2020-15014pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
- CVE-2020-15011GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
- CVE-2020-15007A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe us
- CVE-2020-15006Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
- CVE-2020-10278RVD#2561: Unprotected BIOS allows user to boot from live OS image.Mobile Industrial Robots A/S MiR100
- CVE-2020-10277RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationMobile Industrial Robots A/S MiR100
- CVE-2020-12861A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute