CVEs published June 25, 2020
74 CVEs were published on June 25, 2020: 1 critical, 0 high.
- Published
- 74
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 70
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Adobe Acrobat and Reader
- 24
- VMware ESXi · VMware Workstation +1
- 8
- Adobe After Effects
- 5
- Adobe Illustrator
- 5
- NVIDIA GPU Display Driver
- 5
- pillow
- 5
- Adobe Audition
- 3
- Adobe Premiere Pro
- 3
- Adobe Premiere Rush
- 3
- Rapid7 Metasploit Pro
- 2
Critical 1
Medium, low and unrated 73
- CVE-2020-5966NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape,NVIDIA GPU Display Driver
- CVE-2020-5967NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial ofNVIDIA GPU Display Driver
- CVE-2020-9596Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9595Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9597Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9598Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9601Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9599Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9594Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9600Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9593Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9607Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9606Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9609Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9608Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9605Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9603Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9604Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9602Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9618Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability.Adobe Audition
- CVE-2020-9613Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9611Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9615Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9610Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9612Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9614Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9592Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 andAdobe Acrobat and Reader
- CVE-2020-9657Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability.Adobe Premiere Rush
- CVE-2020-9655Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability.Adobe Premiere Rush
- CVE-2020-9656Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability.Adobe Premiere Rush
- CVE-2020-9652Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability.Adobe Premiere Pro
- CVE-2020-9654Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability.Adobe Premiere Pro
- CVE-2020-9653Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability.Adobe Premiere Pro
- CVE-2020-9659Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability.Adobe Audition
- CVE-2020-9658Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability.Adobe Audition
- CVE-2020-9660Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability.Adobe After Effects
- CVE-2020-9638Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability.Adobe After Effects
- CVE-2020-9661Adobe After Effects versions 17.1 and earlier have an out-of-bounds read vulnerability.Adobe After Effects
- CVE-2020-9637Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability.Adobe After Effects
- CVE-2020-9662Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability.Adobe After Effects
- CVE-2020-9639Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability.Adobe Illustrator
- CVE-2020-9640Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability.Adobe Illustrator
- CVE-2020-9641Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability.Adobe Illustrator
- CVE-2020-9575Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability.Adobe Illustrator
- CVE-2020-9642Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability.Adobe Illustrator
- CVE-2020-9666Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability.Adobe Campaign Classic
- CVE-2020-4072Log Forging in generator-jhipster-kotlinjhipster-kotlin · generator-jhipster-kotlin
- CVE-2020-15302In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in
- CVE-2020-9437SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner a
- CVE-2019-19505Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wirel
- CVE-2019-19506Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process.
- CVE-2019-16213Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system.
- CVE-2020-10177Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.pillow
- CVE-2020-11538In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different ipillow
- CVE-2020-10994In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.pillow
- CVE-2020-10379In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.pillow
- CVE-2020-10378In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed pillow
- CVE-2020-7355Rapid7 Metasploit Pro Stored XSS in 'notes' fieldRapid7 Metasploit Pro
- CVE-2020-7354Rapid7 Metasploit Pro Stored XSS in 'host' fieldRapid7 Metasploit Pro
- CVE-2020-3971VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x beforeVMware ESXi · VMware Workstation +1
- CVE-2020-3965VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3964VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3963VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3966VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3968VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3967VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-3970VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x beVMware ESXi · VMware Workstation +1
- CVE-2020-11735The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, a
- CVE-2020-15047MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.
- CVE-2019-20892net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.
- CVE-2020-5964NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources NVIDIA GPU Display Driver
- CVE-2020-5965NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a spNVIDIA GPU Display Driver
- CVE-2020-5963NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access NVIDIA GPU Display Driver