# CVEs published 2020-07-16

63 CVEs were published on July 16, 2020: 6 critical, 14 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-9670](https://cve.now/CVE-2020-9670.md): Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. (no CVSS, Adobe Creative Cloud Desktop Application)
- [CVE-2020-9669](https://cve.now/CVE-2020-9669.md): Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. (no CVSS, Adobe Creative Cloud Desktop Application)
- [CVE-2020-9650](https://cve.now/CVE-2020-9650.md): Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Media Encoder)
- [CVE-2020-9649](https://cve.now/CVE-2020-9649.md): Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. (no CVSS, Adobe Media Encoder)
- [CVE-2020-9646](https://cve.now/CVE-2020-9646.md): Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. (no CVSS, Adobe Media Encoder)
- [CVE-2020-9485](https://cve.now/CVE-2020-9485.md): An issue was found in Apache Airflow versions 1.10.10 and below. (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-11983](https://cve.now/CVE-2020-11983.md): An issue was found in Apache Airflow versions 1.10.10 and below. (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-11982](https://cve.now/CVE-2020-11982.md): An issue was found in Apache Airflow versions 1.10.10 and below. (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-11981](https://cve.now/CVE-2020-11981.md): An issue was found in Apache Airflow versions 1.10.10 and below. (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-12007](https://cve.now/CVE-2020-12007.md): A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition du (no CVSS, Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2)
- [CVE-2020-12015](https://cve.now/CVE-2020-12015.md): A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserializat (no CVSS, Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2)
- [CVE-2020-12013](https://cve.now/CVE-2020-12013.md): A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. (no CVSS, Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2)
- [CVE-2020-12009](https://cve.now/CVE-2020-12009.md): A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vuln (no CVSS, Mitsubishi Electric MC Works64 · Mitsubishi Electric MC… +2)
- [CVE-2020-12011](https://cve.now/CVE-2020-12011.md): A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executi (no CVSS, Mitsubishi Electric MC Works64 · MC Works32 +2)
- [CVE-2020-4095](https://cve.now/CVE-2020-4095.md): "BigFix Platform is storing clear text credentials within the system's memory. (no CVSS, "HCL BigFix Platform")
- [CVE-2020-13405](https://cve.now/CVE-2020-13405.md): userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database (no CVSS, microweber/microweber)
- [CVE-2019-20909](https://cve.now/CVE-2019-20909.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20910](https://cve.now/CVE-2019-20910.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20911](https://cve.now/CVE-2019-20911.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20912](https://cve.now/CVE-2019-20912.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20913](https://cve.now/CVE-2019-20913.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20914](https://cve.now/CVE-2019-20914.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2019-20915](https://cve.now/CVE-2019-20915.md): An issue was discovered in GNU LibreDWG through 0.9.3. (no CVSS)
- [CVE-2020-3450](https://cve.now/CVE-2020-3450.md): Cisco Vision Dynamic Signage Director SQL Injection Vulnerability (CVSS 4.9, Cisco Vision Dynamic Signage Director)
- [CVE-2020-3468](https://cve.now/CVE-2020-3468.md): Cisco SD-WAN vManage Software SQL Injection Vulnerability (CVSS 5.4, Cisco SD-WAN vManage)
- [CVE-2020-3437](https://cve.now/CVE-2020-3437.md): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-3406](https://cve.now/CVE-2020-3406.md): Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability (CVSS 6.4, Cisco SD-WAN vManage)
- [CVE-2020-3401](https://cve.now/CVE-2020-3401.md): Cisco SD-WAN vManage Software Path Traversal Vulnerability (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-3405](https://cve.now/CVE-2020-3405.md): Cisco SD-WAN vManage Software XML External Entity Vulnerability (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-3388](https://cve.now/CVE-2020-3388.md): Cisco SD-WAN vManage Software Command Injection Vulnerability (CVSS 7.8, Cisco SD-WAN vManage)
- [CVE-2020-3387](https://cve.now/CVE-2020-3387.md): Cisco SD-WAN vManage Software Remote Code Execution Vulnerability (CVSS 7.5, Cisco SD-WAN vManage)
- [CVE-2020-3385](https://cve.now/CVE-2020-3385.md): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (CVSS 7.4, Cisco SD-WAN vEdge router)
- [CVE-2020-3381](https://cve.now/CVE-2020-3381.md): Cisco SD-WAN vManage Software Directory Traversal Vulnerability (CVSS 8.8, Cisco SD-WAN vManage)
- [CVE-2020-3380](https://cve.now/CVE-2020-3380.md): Cisco Data Center Network Manager Privilege Escalation Vulnerability (CVSS 7.8, Cisco Data Center Network Manager)
- [CVE-2020-3379](https://cve.now/CVE-2020-3379.md): Cisco SD-WAN Solution Software Privilege Escalation Vulnerability (CVSS 5.3, Cisco SD-WAN Solution)
- [CVE-2020-3378](https://cve.now/CVE-2020-3378.md): Cisco SD-WAN vManage Software SQL Injection Vulnerability (CVSS 4.3, Cisco SD-WAN vManage)
- [CVE-2020-3372](https://cve.now/CVE-2020-3372.md): Cisco SD-WAN vManage Software Denial of Service Vulnerability (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-3370](https://cve.now/CVE-2020-3370.md): Cisco Content Security Management Appliance Filter Bypass Vulnerability (CVSS 4.0, Cisco Email Security Appliance)
- [CVE-2020-3369](https://cve.now/CVE-2020-3369.md): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (CVSS 8.6, Cisco SD-WAN vEdge router)
- [CVE-2020-3358](https://cve.now/CVE-2020-3358.md): Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability (CVSS 8.6, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3357](https://cve.now/CVE-2020-3357.md): Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3351](https://cve.now/CVE-2020-3351.md): Cisco SD-WAN Solution Software Denial of Service Vulnerability (CVSS 8.6, Cisco SD-WAN Solution)
- [CVE-2020-3349](https://cve.now/CVE-2020-3349.md): Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Data Center Network Manager)
- [CVE-2020-3348](https://cve.now/CVE-2020-3348.md): Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Data Center Network Manager)
- [CVE-2020-3345](https://cve.now/CVE-2020-3345.md): Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability (CVSS 4.3, Cisco WebEx Meetings Server)
- [CVE-2020-3332](https://cve.now/CVE-2020-3332.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability (CVSS 8.1, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3331](https://cve.now/CVE-2020-3331.md): Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability (CVSS 9.8, Cisco RV110W Wireless-N VPN Firewall Firmware)
- [CVE-2020-3330](https://cve.now/CVE-2020-3330.md): Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability (CVSS 9.8, Cisco RV110W Wireless-N VPN Firewall Firmware)
- [CVE-2020-3323](https://cve.now/CVE-2020-3323.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-3197](https://cve.now/CVE-2020-3197.md): Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability (CVSS 4.3, Cisco Meeting App)
- [CVE-2020-3180](https://cve.now/CVE-2020-3180.md): Cisco SD-WAN Solution Software Static Credentials Vulnerability (CVSS 8.4, Cisco SD-WAN vManage)
- [CVE-2020-3150](https://cve.now/CVE-2020-3150.md): Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability (CVSS 5.9, Cisco RV110W Wireless-N VPN Firewall Firmware)
- [CVE-2020-3146](https://cve.now/CVE-2020-3146.md): Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities (CVSS 8.8, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3145](https://cve.now/CVE-2020-3145.md): Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities (CVSS 8.8, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3144](https://cve.now/CVE-2020-3144.md): Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability (CVSS 9.8, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2020-3140](https://cve.now/CVE-2020-3140.md): Cisco Prime License Manager Privilege Escalation Vulnerability (CVSS 9.8, Cisco Prime License Manager)
- [CVE-2020-4462](https://cve.now/CVE-2020-4462.md): IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 ar (CVSS 8.2, IBM Sterling Secure Proxy · IBM External Authentication… +1)
- [CVE-2020-4316](https://cve.now/CVE-2020-4316.md): IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. (CVSS 4.3, IBM Rational Publishing Engine)
- [CVE-2019-4748](https://cve.now/CVE-2019-4748.md): IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation · IBM Engineering Wor… +3)
- [CVE-2019-4747](https://cve.now/CVE-2019-4747.md): IBM Team Concert (RTC) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2020-14000](https://cve.now/CVE-2020-14000.md): MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files w (no CVSS, scratch-vm)
- [CVE-2020-15027](https://cve.now/CVE-2020-15027.md): ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series (no CVSS)
- [CVE-2020-11978](https://cve.now/CVE-2020-11978.md): An issue was found in Apache Airflow versions 1.10.10 and below. (CVSS 8.8, KEV, Apache Software Foundation Apache Airflow · apache-airflow)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.