# CVEs published 2020-07-05

13 CVEs were published on July 5, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-15541](https://cve.now/CVE-2020-15541.md): SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. (no CVSS)
- [CVE-2020-15543](https://cve.now/CVE-2020-15543.md): SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path. (no CVSS)
- [CVE-2020-15542](https://cve.now/CVE-2020-15542.md): SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command. (no CVSS)
- [CVE-2020-15535](https://cve.now/CVE-2020-15535.md): An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. (no CVSS)
- [CVE-2020-15536](https://cve.now/CVE-2020-15536.md): An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. (no CVSS)
- [CVE-2020-15537](https://cve.now/CVE-2020-15537.md): An issue was discovered in the Vanguard plugin 2.1 for WordPress. (no CVSS)
- [CVE-2020-15538](https://cve.now/CVE-2020-15538.md): XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar. (no CVSS)
- [CVE-2020-15539](https://cve.now/CVE-2020-15539.md): SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field. (no CVSS)
- [CVE-2020-15540](https://cve.now/CVE-2020-15540.md): We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page. (no CVSS)
- [CVE-2020-15466](https://cve.now/CVE-2020-15466.md): In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. (no CVSS)
- [CVE-2020-15528](https://cve.now/CVE-2020-15528.md): An issue was discovered in GOG Galaxy Client 2.0.17. (no CVSS)
- [CVE-2020-15529](https://cve.now/CVE-2020-15529.md): An issue was discovered in GOG Galaxy Client 2.0.17. (no CVSS)
- [CVE-2020-15530](https://cve.now/CVE-2020-15530.md): An issue was discovered in Valve Steam Client 2.10.91.91. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.