CVEs published July 16, 2020
63 CVEs were published on July 16, 2020: 6 critical, 14 high. 1 is now in CISA KEV.
- Published
- 63
- Critical
- 6
- High
- 14
- Medium
- 18
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 1
- Fix available
- 7
Most affected products
- Cisco SD-WAN vManage
- 11
- Apache Software Foundation Apache Airflow · apache-airflow
- 5
- Cisco RV130W Wireless-N Multifunction VPN Router Firmware
- 4
- Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2
- 4
- Adobe Media Encoder
- 3
- Cisco Data Center Network Manager
- 3
- Cisco RV110W Wireless-N VPN Firewall Firmware
- 3
- Cisco Small Business RV Series Router Firmware
- 3
- Adobe Creative Cloud Desktop Application
- 2
- Cisco SD-WAN Solution
- 2
Critical 6
- CVE-2020-3357Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2020-3331Cisco RV110W and RV215W Series Routers Arbitrary Code Execution VulnerabilityCisco RV110W Wireless-N VPN Firewall Firmware
- CVE-2020-3330Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential VulnerabilityCisco RV110W Wireless-N VPN Firewall Firmware
- CVE-2020-3323Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2020-3144Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-3140Cisco Prime License Manager Privilege Escalation VulnerabilityCisco Prime License Manager
High 14
- CVE-2020-3388Cisco SD-WAN vManage Software Command Injection VulnerabilityCisco SD-WAN vManage
- CVE-2020-3387Cisco SD-WAN vManage Software Remote Code Execution VulnerabilityCisco SD-WAN vManage
- CVE-2020-3385Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCisco SD-WAN vEdge router
- CVE-2020-3381Cisco SD-WAN vManage Software Directory Traversal VulnerabilityCisco SD-WAN vManage
- CVE-2020-3380Cisco Data Center Network Manager Privilege Escalation VulnerabilityCisco Data Center Network Manager
- CVE-2020-3369Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCisco SD-WAN vEdge router
- CVE-2020-3358Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2020-3351Cisco SD-WAN Solution Software Denial of Service VulnerabilityCisco SD-WAN Solution
- CVE-2020-3332Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-3180Cisco SD-WAN Solution Software Static Credentials VulnerabilityCisco SD-WAN vManage
- CVE-2020-3146Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple VulnerabilitiesCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-3145Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple VulnerabilitiesCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2020-4462IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 arIBM Sterling Secure Proxy · IBM External Authentication… +1
- CVE-2020-11978An issue was found in Apache Airflow versions 1.10.10 and below.Apache Software Foundation Apache Airflow · apache-airflow
Medium, low and unrated 43
- CVE-2020-9670Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability.Adobe Creative Cloud Desktop Application
- CVE-2020-9669Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability.Adobe Creative Cloud Desktop Application
- CVE-2020-9650Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability.Adobe Media Encoder
- CVE-2020-9649Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability.Adobe Media Encoder
- CVE-2020-9646Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability.Adobe Media Encoder
- CVE-2020-9485An issue was found in Apache Airflow versions 1.10.10 and below.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-11983An issue was found in Apache Airflow versions 1.10.10 and below.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-11982An issue was found in Apache Airflow versions 1.10.10 and below.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-11981An issue was found in Apache Airflow versions 1.10.10 and below.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-12007A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition duMitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2
- CVE-2020-12015A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserializatMitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2
- CVE-2020-12013A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely.Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2
- CVE-2020-12009A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnMitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2
- CVE-2020-12011A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executiMitsubishi Electric MC Works64 · MC Works32 +2
- CVE-2020-4095"BigFix Platform is storing clear text credentials within the system's memory."HCL BigFix Platform"
- CVE-2020-13405userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database microweber/microweber
- CVE-2019-20909An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20910An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20911An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20912An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20913An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20914An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2019-20915An issue was discovered in GNU LibreDWG through 0.9.3.
- CVE-2020-3450Cisco Vision Dynamic Signage Director SQL Injection VulnerabilityCisco Vision Dynamic Signage Director
- CVE-2020-3468Cisco SD-WAN vManage Software SQL Injection VulnerabilityCisco SD-WAN vManage
- CVE-2020-3437Cisco SD-WAN vManage Software Information Disclosure VulnerabilityCisco SD-WAN vManage
- CVE-2020-3406Cisco SD-WAN vManage Software Cross-Site Scripting VulnerabilityCisco SD-WAN vManage
- CVE-2020-3401Cisco SD-WAN vManage Software Path Traversal VulnerabilityCisco SD-WAN vManage
- CVE-2020-3405Cisco SD-WAN vManage Software XML External Entity VulnerabilityCisco SD-WAN vManage
- CVE-2020-3379Cisco SD-WAN Solution Software Privilege Escalation VulnerabilityCisco SD-WAN Solution
- CVE-2020-3378Cisco SD-WAN vManage Software SQL Injection VulnerabilityCisco SD-WAN vManage
- CVE-2020-3372Cisco SD-WAN vManage Software Denial of Service VulnerabilityCisco SD-WAN vManage
- CVE-2020-3370Cisco Content Security Management Appliance Filter Bypass VulnerabilityCisco Email Security Appliance
- CVE-2020-3349Cisco Data Center Network Manager Cross-Site Scripting VulnerabilitiesCisco Data Center Network Manager
- CVE-2020-3348Cisco Data Center Network Manager Cross-Site Scripting VulnerabilitiesCisco Data Center Network Manager
- CVE-2020-3345Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection VulnerabilityCisco WebEx Meetings Server
- CVE-2020-3197Cisco Meetings App Missing TURN Server Credentials Expiration VulnerabilityCisco Meeting App
- CVE-2020-3150Cisco Small Business RV110W and RV215W Series Routers Information Disclosure VulnerabilityCisco RV110W Wireless-N VPN Firewall Firmware
- CVE-2020-4316IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies.IBM Rational Publishing Engine
- CVE-2019-4748IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.IBM Rational DOORS Next Generation · IBM Engineering Wor… +3
- CVE-2019-4747IBM Team Concert (RTC) is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2020-14000MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files wscratch-vm
- CVE-2020-15027ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series