# CVEs published 2020-06-24

65 CVEs were published on June 24, 2020: 7 critical, 4 high. Days are UTC.

- [CVE-2020-15046](https://cve.now/CVE-2020-15046.md): The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confi (no CVSS)
- [CVE-2020-15005](https://cve.now/CVE-2020-15005.md): In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img\_a (no CVSS, mediawiki/core)
- [CVE-2020-15041](https://cve.now/CVE-2020-15041.md): PHP-Fusion 9.03.60 allows XSS via the administration/site\_links.php Add Site Link field. (no CVSS)
- [CVE-2020-5962](https://cve.now/CVE-2020-5962.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with l (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-15038](https://cve.now/CVE-2020-15038.md): The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS. (no CVSS)
- [CVE-2020-13247](https://cve.now/CVE-2020-13247.md): BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the a (no CVSS)
- [CVE-2020-15026](https://cve.now/CVE-2020-15026.md): Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/pl (no CVSS)
- [CVE-2020-13248](https://cve.now/CVE-2020-13248.md): BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx (no CVSS)
- [CVE-2020-15025](https://cve.now/CVE-2020-15025.md): ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by send (CVSS 4.4)
- [CVE-2020-14472](https://cve.now/CVE-2020-14472.md): On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction (no CVSS)
- [CVE-2020-14473](https://cve.now/CVE-2020-14473.md): Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1. (no CVSS)
- [CVE-2020-10561](https://cve.now/CVE-2020-10561.md): An issue was discovered on Xiaomi Mi Jia ink-jet printer \< 3.4.6\_0138. (no CVSS)
- [CVE-2020-11961](https://cve.now/CVE-2020-11961.md): Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get\_config\_result witho (no CVSS)
- [CVE-2020-11960](https://cve.now/CVE-2020-11960.md): Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c\_upload interface let attacker able to ex (no CVSS)
- [CVE-2020-11959](https://cve.now/CVE-2020-11959.md): An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. (no CVSS)
- [CVE-2020-3962](https://cve.now/CVE-2020-3962.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3969](https://cve.now/CVE-2020-3969.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-14094](https://cve.now/CVE-2020-14094.md): In Xiaomi router R3600, ROM version\<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or (no CVSS, Xiaomi router R3600)
- [CVE-2020-6870](https://cve.now/CVE-2020-6870.md): The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. (no CVSS, ZTE NetNumenU31R20)
- [CVE-2020-9494](https://cve.now/CVE-2020-9494.md): Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can c (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2020-14095](https://cve.now/CVE-2020-14095.md): In Xiaomi router R3600, ROM version\<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to (no CVSS, Xiaomi router R3600)
- [CVE-2020-13443](https://cve.now/CVE-2020-13443.md): ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment (no CVSS)
- [CVE-2020-13483](https://cve.now/CVE-2020-13483.md): The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items\[ITEMS\]\[ID\] parameter to the components/bitrix/mobileapp.lis (no CVSS)
- [CVE-2020-13484](https://cve.now/CVE-2020-13484.md): Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the (no CVSS)
- [CVE-2020-13700](https://cve.now/CVE-2020-13700.md): An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. (no CVSS, airesvsg/acf-to-rest-api)
- [CVE-2020-14018](https://cve.now/CVE-2020-14018.md): An issue was discovered in Navigate CMS 2.9 r1433. (no CVSS)
- [CVE-2020-14017](https://cve.now/CVE-2020-14017.md): An issue was discovered in Navigate CMS 2.9 r1433. (no CVSS)
- [CVE-2020-14016](https://cve.now/CVE-2020-14016.md): An issue was discovered in Navigate CMS 2.9 r1433. (no CVSS)
- [CVE-2020-15015](https://cve.now/CVE-2020-15015.md): The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document. (no CVSS, GleamTech.FileUltimate)
- [CVE-2020-14015](https://cve.now/CVE-2020-14015.md): An issue was discovered in Navigate CMS 2.9 r1433. (no CVSS)
- [CVE-2020-14014](https://cve.now/CVE-2020-14014.md): An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. (no CVSS)
- [CVE-2020-4413](https://cve.now/CVE-2020-4413.md): IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP (CVSS 5.9, IBM Security Secret Server)
- [CVE-2020-4342](https://cve.now/CVE-2020-4342.md): IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user. (CVSS 5.3, IBM Security Secret Server)
- [CVE-2020-4341](https://cve.now/CVE-2020-4341.md): IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is ret (CVSS 2.7, IBM Security Secret Server)
- [CVE-2020-4327](https://cve.now/CVE-2020-4327.md): IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is ret (CVSS 2.7, IBM Security Secret Server)
- [CVE-2020-4323](https://cve.now/CVE-2020-4323.md): IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Security Secret Server)
- [CVE-2020-4322](https://cve.now/CVE-2020-4322.md): IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. (CVSS 4.3, IBM Security Secret Server)
- [CVE-2020-14005](https://cve.now/CVE-2020-14005.md): Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2020-14006](https://cve.now/CVE-2020-14006.md): Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. (no CVSS)
- [CVE-2020-14007](https://cve.now/CVE-2020-14007.md): Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. (no CVSS)
- [CVE-2020-12862](https://cve.now/CVE-2020-12862.md): An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read (no CVSS)
- [CVE-2020-12863](https://cve.now/CVE-2020-12863.md): An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read (no CVSS)
- [CVE-2020-12864](https://cve.now/CVE-2020-12864.md): An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read (no CVSS)
- [CVE-2020-12865](https://cve.now/CVE-2020-12865.md): A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to exec (no CVSS)
- [CVE-2020-12866](https://cve.now/CVE-2020-12866.md): A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cau (no CVSS)
- [CVE-2020-15018](https://cve.now/CVE-2020-15018.md): playSMS through 1.4.3 is vulnerable to session fixation. (no CVSS)
- [CVE-2020-4071](https://cve.now/CVE-2020-4071.md): Timing attack on django-basic-auth-ip-whitelist (CVSS 2.2, tm-kn django-basic-auth-ip-whitelist · django-basic-auth-ip…)
- [CVE-2020-15014](https://cve.now/CVE-2020-15014.md): pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF. (no CVSS)
- [CVE-2020-7667](https://cve.now/CVE-2020-7667.md): Arbitrary File Write via Archive Extraction (Zip Slip) (CVSS 7.5, github.com/sassoftware/go-rpmutils/cpio · github.com/sassof…)
- [CVE-2020-15011](https://cve.now/CVE-2020-15011.md): GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. (no CVSS)
- [CVE-2020-15007](https://cve.now/CVE-2020-15007.md): A buffer overflow in the M\_LoadDefaults function in m\_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe us (no CVSS)
- [CVE-2020-15006](https://cve.now/CVE-2020-15006.md): Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php. (no CVSS)
- [CVE-2020-10279](https://cve.now/CVE-2020-10279.md): RVD#2569: Insecure operating system defaults in MiR robots (CVSS 10.0, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10280](https://cve.now/CVE-2020-10280.md): RVD#2568: Apache server is vulnerable to a DoS (CVSS 8.2, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10269](https://cve.now/CVE-2020-10269.md): RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point (CVSS 9.8, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10275](https://cve.now/CVE-2020-10275.md): RVD#2565: Weak token generation for the REST API. (CVSS 9.8, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10273](https://cve.now/CVE-2020-10273.md): RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers (CVSS 7.5, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10278](https://cve.now/CVE-2020-10278.md): RVD#2561: Unprotected BIOS allows user to boot from live OS image. (CVSS 6.1, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10277](https://cve.now/CVE-2020-10277.md): RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation (CVSS 6.4, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10270](https://cve.now/CVE-2020-10270.md): RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard (CVSS 9.8, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10276](https://cve.now/CVE-2020-10276.md): RVD#2558: Default credentials on SICK PLC allows disabling safety features (CVSS 9.8, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10271](https://cve.now/CVE-2020-10271.md): RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired ones (CVSS 10.0, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10274](https://cve.now/CVE-2020-10274.md): RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps) (CVSS 7.1, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-10272](https://cve.now/CVE-2020-10272.md): RVD#2554: MiR ROS computational graph presents no authentication mechanisms (CVSS 10.0, Mobile Industrial Robots A/S MiR100)
- [CVE-2020-12861](https://cve.now/CVE-2020-12861.md): A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.