# CVEs published 2020-07-06

28 CVEs were published on July 6, 2020: 1 critical, 4 high. Days are UTC.

- [CVE-2020-9395](https://cve.now/CVE-2020-9395.md): An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. (no CVSS)
- [CVE-2019-14900](https://cve.now/CVE-2019-14900.md): A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. (no CVSS, Hibernate · org.hibernate:hibernate-core)
- [CVE-2020-1839](https://cve.now/CVE-2020-1839.md): HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1836](https://cve.now/CVE-2020-1836.md): HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have an (no CVSS, HUAWEI P30;HUAWEI P30 Pro)
- [CVE-2020-9226](https://cve.now/CVE-2020-9226.md): HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. (no CVSS, HUAWEI P30)
- [CVE-2020-9261](https://cve.now/CVE-2020-9261.md): HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1838](https://cve.now/CVE-2020-1838.md): HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. (no CVSS, HUAWEI Mate 30 Pro)
- [CVE-2020-9262](https://cve.now/CVE-2020-9262.md): HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-10760](https://cve.now/CVE-2020-10760.md): A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuratio (no CVSS, Samba)
- [CVE-2020-6013](https://cve.now/CVE-2020-6013.md): ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute co (no CVSS, Check Point ZoneAlarm)
- [CVE-2020-5372](https://cve.now/CVE-2020-5372.md): Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. (CVSS 8.6, Dell PowerStore)
- [CVE-2020-5371](https://cve.now/CVE-2020-5371.md): Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. (CVSS 8.0, Dell Isilon OneFS)
- [CVE-2020-5368](https://cve.now/CVE-2020-5368.md): Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. (CVSS 9.8, Dell VxRail)
- [CVE-2020-5356](https://cve.now/CVE-2020-5356.md): Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorizat (CVSS 7.7, Dell Power Protect Data Manager)
- [CVE-2020-5352](https://cve.now/CVE-2020-5352.md): Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. (CVSS 8.8, Dell Data Protection Advisor)
- [CVE-2019-8249](https://cve.now/CVE-2019-8249.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8252](https://cve.now/CVE-2019-8252.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8066](https://cve.now/CVE-2019-8066.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8250](https://cve.now/CVE-2019-8250.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8251](https://cve.now/CVE-2019-8251.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-1837](https://cve.now/CVE-2020-1837.md): ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. (no CVSS, ChangXiang 8 Plus)
- [CVE-2020-9100](https://cve.now/CVE-2020-9100.md): Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. (no CVSS, HiSuite)
- [CVE-2020-14303](https://cve.now/CVE-2020-14303.md): A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. (no CVSS, Samba)
- [CVE-2020-15570](https://cve.now/CVE-2020-15570.md): The parse\_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to caus (no CVSS)
- [CVE-2020-15569](https://cve.now/CVE-2020-15569.md): PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor. (no CVSS)
- [CVE-2020-7690](https://cve.now/CVE-2020-7690.md): All affected versions \<2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). (no CVSS, jspdf)
- [CVE-2020-7691](https://cve.now/CVE-2020-7691.md): Cross-site Scripting (XSS) (CVSS 6.3, jspdf)
- [CVE-2020-15562](https://cve.now/CVE-2020-15562.md): An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.