# CVEs published 2020-06-25

74 CVEs were published on June 25, 2020: 1 critical, 0 high. Days are UTC.

- [CVE-2020-5966](https://cve.now/CVE-2020-5966.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5967](https://cve.now/CVE-2020-5967.md): NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-9596](https://cve.now/CVE-2020-9596.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9595](https://cve.now/CVE-2020-9595.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9597](https://cve.now/CVE-2020-9597.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9598](https://cve.now/CVE-2020-9598.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9601](https://cve.now/CVE-2020-9601.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9599](https://cve.now/CVE-2020-9599.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9594](https://cve.now/CVE-2020-9594.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9600](https://cve.now/CVE-2020-9600.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9593](https://cve.now/CVE-2020-9593.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9607](https://cve.now/CVE-2020-9607.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9606](https://cve.now/CVE-2020-9606.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9609](https://cve.now/CVE-2020-9609.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9608](https://cve.now/CVE-2020-9608.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9605](https://cve.now/CVE-2020-9605.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9603](https://cve.now/CVE-2020-9603.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9604](https://cve.now/CVE-2020-9604.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9602](https://cve.now/CVE-2020-9602.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9618](https://cve.now/CVE-2020-9618.md): Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Audition)
- [CVE-2020-9613](https://cve.now/CVE-2020-9613.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9611](https://cve.now/CVE-2020-9611.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9615](https://cve.now/CVE-2020-9615.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9610](https://cve.now/CVE-2020-9610.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9612](https://cve.now/CVE-2020-9612.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9614](https://cve.now/CVE-2020-9614.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9592](https://cve.now/CVE-2020-9592.md): Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9657](https://cve.now/CVE-2020-9657.md): Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Premiere Rush)
- [CVE-2020-9655](https://cve.now/CVE-2020-9655.md): Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Premiere Rush)
- [CVE-2020-9656](https://cve.now/CVE-2020-9656.md): Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Premiere Rush)
- [CVE-2020-9652](https://cve.now/CVE-2020-9652.md): Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Premiere Pro)
- [CVE-2020-9654](https://cve.now/CVE-2020-9654.md): Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Premiere Pro)
- [CVE-2020-9653](https://cve.now/CVE-2020-9653.md): Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Premiere Pro)
- [CVE-2020-9659](https://cve.now/CVE-2020-9659.md): Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Audition)
- [CVE-2020-9658](https://cve.now/CVE-2020-9658.md): Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Audition)
- [CVE-2020-9660](https://cve.now/CVE-2020-9660.md): Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-9638](https://cve.now/CVE-2020-9638.md): Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-9661](https://cve.now/CVE-2020-9661.md): Adobe After Effects versions 17.1 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-9637](https://cve.now/CVE-2020-9637.md): Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-9662](https://cve.now/CVE-2020-9662.md): Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe After Effects)
- [CVE-2020-9639](https://cve.now/CVE-2020-9639.md): Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9640](https://cve.now/CVE-2020-9640.md): Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9641](https://cve.now/CVE-2020-9641.md): Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9575](https://cve.now/CVE-2020-9575.md): Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9642](https://cve.now/CVE-2020-9642.md): Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. (no CVSS, Adobe Illustrator)
- [CVE-2020-9666](https://cve.now/CVE-2020-9666.md): Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. (no CVSS, Adobe Campaign Classic)
- [CVE-2020-4072](https://cve.now/CVE-2020-4072.md): Log Forging in generator-jhipster-kotlin (CVSS 5.3, jhipster-kotlin · generator-jhipster-kotlin)
- [CVE-2020-15302](https://cve.now/CVE-2020-15302.md): In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in (no CVSS)
- [CVE-2020-9437](https://cve.now/CVE-2020-9437.md): SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner a (no CVSS)
- [CVE-2019-19505](https://cve.now/CVE-2019-19505.md): Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wirel (no CVSS)
- [CVE-2019-19506](https://cve.now/CVE-2019-19506.md): Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. (no CVSS)
- [CVE-2019-16213](https://cve.now/CVE-2019-16213.md): Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. (no CVSS)
- [CVE-2020-10177](https://cve.now/CVE-2020-10177.md): Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. (no CVSS, pillow)
- [CVE-2020-11538](https://cve.now/CVE-2020-11538.md): In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different i (no CVSS, pillow)
- [CVE-2020-10994](https://cve.now/CVE-2020-10994.md): In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file. (no CVSS, pillow)
- [CVE-2020-10379](https://cve.now/CVE-2020-10379.md): In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. (no CVSS, pillow)
- [CVE-2020-10378](https://cve.now/CVE-2020-10378.md): In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-\>shuffle is instructed (no CVSS, pillow)
- [CVE-2020-7355](https://cve.now/CVE-2020-7355.md): Rapid7 Metasploit Pro Stored XSS in 'notes' field (CVSS 6.1, Rapid7 Metasploit Pro)
- [CVE-2020-7354](https://cve.now/CVE-2020-7354.md): Rapid7 Metasploit Pro Stored XSS in 'host' field (CVSS 6.1, Rapid7 Metasploit Pro)
- [CVE-2018-21268](https://cve.now/CVE-2018-21268.md): The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. (CVSS 10.0, traceroute)
- [CVE-2020-3971](https://cve.now/CVE-2020-3971.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3965](https://cve.now/CVE-2020-3965.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3964](https://cve.now/CVE-2020-3964.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3963](https://cve.now/CVE-2020-3963.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3966](https://cve.now/CVE-2020-3966.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3968](https://cve.now/CVE-2020-3968.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3967](https://cve.now/CVE-2020-3967.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3970](https://cve.now/CVE-2020-3970.md): VMware ESXi (7.0 before ESXi\_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-11735](https://cve.now/CVE-2020-11735.md): The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, a (no CVSS)
- [CVE-2020-15047](https://cve.now/CVE-2020-15047.md): MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers. (no CVSS)
- [CVE-2019-20892](https://cve.now/CVE-2019-20892.md): net-snmp before 5.8.1.pre1 has a double free in usm\_free\_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. (no CVSS)
- [CVE-2020-5964](https://cve.now/CVE-2020-5964.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5965](https://cve.now/CVE-2020-5965.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a sp (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5963](https://cve.now/CVE-2020-5963.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access (no CVSS, NVIDIA GPU Display Driver)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.