# CVEs published 2020-07-03

11 CVEs were published on July 3, 2020: 1 critical, 5 high. Days are UTC.

- [CVE-2020-7284](https://cve.now/CVE-2020-7284.md): Network Security Management (NSM) - Exposure of Sensitive Information (CVSS 8.6, McAfee Network Security Management)
- [CVE-2020-10282](https://cve.now/CVE-2020-10282.md): RVD#3316: No authentication in MAVLink protocol (CVSS 9.8, MAVLink)
- [CVE-2020-10281](https://cve.now/CVE-2020-10281.md): RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0 (CVSS 7.5, MAVLink)
- [CVE-2020-7283](https://cve.now/CVE-2020-7283.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5, McAfee Total Protection)
- [CVE-2020-7281](https://cve.now/CVE-2020-7281.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5, McAfee Total Protection)
- [CVE-2020-7282](https://cve.now/CVE-2020-7282.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5, McAfee Total Protection)
- [CVE-2020-15518](https://cve.now/CVE-2020-15518.md): VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivil (no CVSS)
- [CVE-2020-14173](https://cve.now/CVE-2020-14173.md): The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or Ja (no CVSS, Atlassian Jira Server)
- [CVE-2020-14172](https://cve.now/CVE-2020-14172.md): This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implem (no CVSS, Atlassian Jira Server)
- [CVE-2019-20419](https://cve.now/CVE-2019-20419.md): Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerabilit (no CVSS, Atlassian Jira Server)
- [CVE-2019-20418](https://cve.now/CVE-2019-20418.md): Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Applic (no CVSS, Atlassian Jira Server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.