CVEs published July 10, 2020
24 CVEs were published on July 10, 2020: 0 critical, 2 high. 3 are now in CISA KEV.
- Published
- 24
- Critical
- 0
- High
- 2
- Medium
- 8
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 3
- Fix available
- 6
Most affected products
- Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- 6
- Citrix ADC, Citrix Gateway
- 3
- bareos
- 1
- Bareos GmbH & Co. KG Bareos Director
- 1
- Bouke django-two-factor-auth · django-two-factor-auth
- 1
- Citrix Gateway Plug-in for Linux
- 1
- devcert
- 1
- Glacies IceHRM"
- 1
- HUAWEI P30
- 1
- HUAWEI P30;HUAWEI P30 Pro
- 1
High 2
- CVE-2020-7815XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to tTOBESOFT XPLATFORM
- CVE-2020-7814RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of valRAONWIZ RAON KUpload
Medium, low and unrated 22
- CVE-2020-15105In Django Two-Factor Authentication, user passwords are stored in clear text in the Django sessionBouke django-two-factor-auth · django-two-factor-auth
- CVE-2020-4042Authentication bypass in Bareosbareos
- CVE-2020-11061Heap-based Buffer Overflow in Bareos DirectorBareos GmbH & Co. KG Bareos Director
- CVE-2020-11081osquery susceptible to DLL search order hijacking of zlib1.dllosquery
- CVE-2020-6114An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09Glacies IceHRM"
- CVE-2020-15504A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker
- CVE-2020-8181A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.Nextcloud Contact
- CVE-2020-8199Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root.Citrix Gateway Plug-in for Linux
- CVE-2020-8197Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-Citrix ADC, Citrix Gateway
- CVE-2020-8196Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and CCitrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8195Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 andCitrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8198Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 andCitrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8194Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8193Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and CCitrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8191Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 andCitrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
- CVE-2020-8186A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input todevcert
- CVE-2020-8187Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform Citrix ADC, Citrix Gateway
- CVE-2020-8190Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 alCitrix ADC, Citrix Gateway
- CVE-2020-3974VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior VMware Fusion, VMware Remote Console for Mac and Horizon Cl…
- CVE-2020-9258HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability.HUAWEI P30
- CVE-2020-9260HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2PHUAWEI P30;HUAWEI P30 Pro
- CVE-2020-5607Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phSHIRASAGI Project SHIRASAGI