CVEs published July 8, 2020
18 CVEs were published on July 8, 2020: 1 critical, 2 high.
- Published
- 18
- Critical
- 1
- High
- 2
- Medium
- 2
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Palo Alto Networks PAN-OS
- 4
- Huawei AR120-S · Huawei AR1200 +47
- 3
- Apache Camel · org.apache.camel:camel-robotframework
- 1
- GeoVision Door Access Control Device
- 1
- IceWall SSO Dfw; IceWall SSO Dgfw
- 1
- Micro Fosus Identity Manager
- 1
- MX Player Android App
- 1
- NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T
- 1
- Symantec Endpoint Detection And Response
- 1
- Tableau
- 1
Critical 1
High 2
Medium, low and unrated 15
- CVE-2020-5974NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on ceNVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T
- CVE-2020-15072An issue was discovered in phpList through 3.5.4.
- CVE-2020-15073An issue was discovered in phpList through 3.5.4.
- CVE-2019-19415The SIP module of some Huawei products have a denial of service (DoS) vulnerability.Huawei AR120-S · Huawei AR1200 +47
- CVE-2019-19416The SIP module of some Huawei products have a denial of service (DoS) vulnerability.Huawei AR120-S · Huawei AR1200 +47
- CVE-2019-19417The SIP module of some Huawei products have a denial of service (DoS) vulnerability.Huawei AR120-S · Huawei AR1200 +47
- CVE-2020-2031PAN-OS: Integer underflow in the management interfacePalo Alto Networks PAN-OS
- CVE-2020-1982PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered servicesPalo Alto Networks PAN-OS
- CVE-2020-11994Server-Side Template Injection and arbitrary file disclosure on Camel templating componentsApache Camel · org.apache.camel:camel-robotframework
- CVE-2020-5839Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerabilSymantec Endpoint Detection And Response
- CVE-2020-6938A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow aTableau
- CVE-2020-3973The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection.VMware SD-WAN by VeloCloud
- CVE-2020-7140A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scIceWall SSO Dfw; IceWall SSO Dgfw
- CVE-2020-5764MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is using the MX Transfer feMX Player Android App
- CVE-2020-11849Elevation of privilege and unauthorized access in Micro Focus Identity Manager productMicro Fosus Identity Manager