CVEs published July 13, 2020
19 CVEs were published on July 13, 2020: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 19
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 1
- Fix available
- 6
Most affected products
- Atlassian Jira Server
- 6
- Docker
- 2
- [UNKNOWN] Linux Kernel
- 1
- IBM Maximo Asset Management
- 1
- SRS Simple Hits Counter Plugin for WordPress
- 1
Critical 1
Medium, low and unrated 18
- CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://aDocker
- CVE-2020-14298The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc miDocker
- CVE-2020-15050An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.
- CVE-2020-10989An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payl
- CVE-2020-10988A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to
- CVE-2020-10986A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and
- CVE-2019-19338A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculativ[UNKNOWN] Linux Kernel
- CVE-2020-5766Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 aSRS Simple Hits Counter Plugin for WordPress
- CVE-2020-11749Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views.
- CVE-2019-4591IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another uIBM Maximo Asset Management
- CVE-2020-15689Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact ra
- CVE-2019-20901The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users tAtlassian Jira Server
- CVE-2020-14174Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure DirectAtlassian Jira Server
- CVE-2019-20900Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scAtlassian Jira Server
- CVE-2019-20899The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated Atlassian Jira Server
- CVE-2019-20898Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticateAtlassian Jira Server
- CVE-2019-20897The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of ServiceAtlassian Jira Server
- CVE-2019-20907In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.ope