# CVEs published 2020-07-08

18 CVEs were published on July 8, 2020: 1 critical, 2 high. Days are UTC.

- [CVE-2020-5974](https://cve.now/CVE-2020-5974.md): NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on ce (no CVSS, NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T)
- [CVE-2020-15072](https://cve.now/CVE-2020-15072.md): An issue was discovered in phpList through 3.5.4. (no CVSS)
- [CVE-2020-15073](https://cve.now/CVE-2020-15073.md): An issue was discovered in phpList through 3.5.4. (no CVSS)
- [CVE-2019-19415](https://cve.now/CVE-2019-19415.md): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. (no CVSS, Huawei AR120-S · Huawei AR1200 +47)
- [CVE-2019-19416](https://cve.now/CVE-2019-19416.md): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. (no CVSS, Huawei AR120-S · Huawei AR1200 +47)
- [CVE-2019-19417](https://cve.now/CVE-2019-19417.md): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. (no CVSS, Huawei AR120-S · Huawei AR1200 +47)
- [CVE-2020-2034](https://cve.now/CVE-2020-2034.md): PAN-OS: OS command injection vulnerability in GlobalProtect portal (CVSS 8.1, Palo Alto Networks PAN-OS)
- [CVE-2020-2031](https://cve.now/CVE-2020-2031.md): PAN-OS: Integer underflow in the management interface (CVSS 4.9, Palo Alto Networks PAN-OS)
- [CVE-2020-2030](https://cve.now/CVE-2020-2030.md): PAN-OS: OS command injection vulnerability in the management interface (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-1982](https://cve.now/CVE-2020-1982.md): PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services (CVSS 4.8, Palo Alto Networks PAN-OS)
- [CVE-2020-11994](https://cve.now/CVE-2020-11994.md): Server-Side Template Injection and arbitrary file disclosure on Camel templating components (no CVSS, Apache Camel · org.apache.camel:camel-robotframework)
- [CVE-2020-5839](https://cve.now/CVE-2020-5839.md): Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerabil (no CVSS, Symantec Endpoint Detection And Response)
- [CVE-2020-6938](https://cve.now/CVE-2020-6938.md): A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow a (no CVSS, Tableau)
- [CVE-2020-3973](https://cve.now/CVE-2020-3973.md): The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. (no CVSS, VMware SD-WAN by VeloCloud)
- [CVE-2020-7140](https://cve.now/CVE-2020-7140.md): A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site sc (no CVSS, IceWall SSO Dfw; IceWall SSO Dgfw)
- [CVE-2020-5764](https://cve.now/CVE-2020-5764.md): MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is using the MX Transfer fe (no CVSS, MX Player Android App)
- [CVE-2020-11849](https://cve.now/CVE-2020-11849.md): Elevation of privilege and unauthorized access in Micro Focus Identity Manager product (no CVSS, Micro Fosus Identity Manager)
- [CVE-2020-3931](https://cve.now/CVE-2020-3931.md): GeoVision Door Access Control Device - Buffer overflow vulnerability (CVSS 9.8, GeoVision Door Access Control Device)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.