CVEs published July 27, 2020
25 CVEs were published on July 27, 2020: 0 critical, 0 high.
- Published
- 25
- Critical
- 0
- High
- 0
- Medium
- 6
- Low
- 3
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Elastic Kibana
- 2
- Microsoft Windows
- 2
- uvicorn
- 2
- FreeRDP
- 1
- github.com/grafana/grafana
- 1
- Grundfos CIM
- 1
- HUAWEI Mate
- 1
- HUAWEI P30
- 1
- IBM MQ Appliance
- 1
- IBM Qradar Advisor
- 1
Medium, low and unrated 25
- CVE-2020-12845Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences.
- CVE-2020-12460OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a
- CVE-2020-12880An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8.
- CVE-2020-10643OSIsoft PI SystemOSIsoft PI Vision
- CVE-2020-8558Kubernetes node setting allows for neighboring hosts to bypass localhost boundaryKubernetes · k8s.io/kubernetes
- CVE-2020-10609Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system seGrundfos CIM
- CVE-2020-1457A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft WindMicrosoft Windows
- CVE-2020-1425A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft WinMicrosoft Windows
- CVE-2020-7016Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.Elastic Kibana
- CVE-2020-7017In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.Elastic Kibana
- CVE-2020-15120Authorization Bypass in I hate moneyspiral-project ihatemoney · ihatemoney
- CVE-2020-15593SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC.
- CVE-2020-15592SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file.
- CVE-2020-4498IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data withiIBM MQ Appliance
- CVE-2020-4408The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which coulIBM Qradar Advisor
- CVE-2020-4405IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable logIBM Verify Gateway
- CVE-2020-11110Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject Jagithub.com/grafana/grafana
- CVE-2020-9251HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerability.HUAWEI Mate
- CVE-2020-9077HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability.HUAWEI P30
- CVE-2020-7695HTTP Response Splittinguvicorn
- CVE-2020-7694Log Injectionuvicorn
- CVE-2020-5611Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authSocial Rocket Social Sharing Plugin
- CVE-2020-15953LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and
- CVE-2020-15954KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
- CVE-2020-15103Integer Overflow in FreeRDPFreeRDP