CVEs published July 6, 2020
28 CVEs were published on July 6, 2020: 1 critical, 4 high.
- Published
- 28
- Critical
- 1
- High
- 4
- Medium
- 1
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Adobe Acrobat and Reader
- 5
- HUAWEI Mate
- 3
- jspdf
- 2
- Samba
- 2
- ChangXiang 8 Plus
- 1
- Check Point ZoneAlarm
- 1
- Dell Data Protection Advisor
- 1
- Dell Isilon OneFS
- 1
- Dell Power Protect Data Manager
- 1
- Dell PowerStore
- 1
Critical 1
High 4
- CVE-2020-5372Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network.Dell PowerStore
- CVE-2020-5371Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability.Dell Isilon OneFS
- CVE-2020-5356Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorizatDell Power Protect Data Manager
- CVE-2020-5352Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability.Dell Data Protection Advisor
Medium, low and unrated 23
- CVE-2020-9395An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6.
- CVE-2019-14900A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.Hibernate · org.hibernate:hibernate-core
- CVE-2020-1839HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability.HUAWEI Mate
- CVE-2020-1836HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have anHUAWEI P30;HUAWEI P30 Pro
- CVE-2020-9226HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability.HUAWEI P30
- CVE-2020-9261HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability.HUAWEI Mate
- CVE-2020-1838HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability.HUAWEI Mate 30 Pro
- CVE-2020-9262HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability.HUAWEI Mate
- CVE-2020-10760A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuratioSamba
- CVE-2020-6013ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute coCheck Point ZoneAlarm
- CVE-2019-8249Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8252Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8066Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8250Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8251Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2020-1837ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability.ChangXiang 8 Plus
- CVE-2020-9100Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability.HiSuite
- CVE-2020-14303A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4.Samba
- CVE-2020-15570The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to caus
- CVE-2020-15569PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.
- CVE-2020-7690All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS).jspdf
- CVE-2020-7691Cross-site Scripting (XSS)jspdf
- CVE-2020-15562An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7.