CVEs published July 28, 2020
86 CVEs were published on July 28, 2020: 28 critical, 22 high.
- Published
- 86
- Critical
- 28
- High
- 22
- Medium
- 9
- Low
- 2
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- CentOS Web Panel
- 39
- NETGEAR R6700
- 10
- IBM MQ Appliance
- 4
- shopware/platform
- 2
- Veeam ONE
- 2
- concrete5/concrete5
- 1
- Dell Open Manage Server Administrator
- 1
- freeDiameter
- 1
- grin
- 1
- IBM Intelligent Operations Center · IBM Water Operations fo…
- 1
Critical 28
- CVE-2020-5377Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.Dell Open Manage Server Administrator
- CVE-2020-15623This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15614This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15615This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15612This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15613This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15610This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15611This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15608This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15609This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15606This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15607This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15433This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15434This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15435This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15431This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15432This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15429This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15430This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15427This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15428This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15424This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15425This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15426This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15422This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15423This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
- CVE-2020-15420This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891.CentOS Web Panel
- CVE-2020-15421This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.CentOS Web Panel
High 22
- CVE-2020-6098An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2.freeDiameter
- CVE-2020-15416This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rNETGEAR R6700
- CVE-2020-10929This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 NETGEAR R6700
- CVE-2020-10927This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 NETGEAR R6700
- CVE-2020-10928This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 NETGEAR R6700
- CVE-2020-10924This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rNETGEAR R6700
- CVE-2020-10925This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGNETGEAR R6700
- CVE-2020-10926This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 NETGEAR R6700
- CVE-2020-15419This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.Veeam ONE
- CVE-2020-15418This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.Veeam ONE
- CVE-2020-15627This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15628This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15625This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15626This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15624This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15621This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15622This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15619This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15620This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15616This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15617This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
- CVE-2020-15618This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923CentOS Web Panel
Medium, low and unrated 36
- CVE-2020-10982Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.
- CVE-2020-10983Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.
- CVE-2020-10984Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.
- CVE-2020-10985Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.
- CVE-2020-11474NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
- CVE-2020-11476Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.concrete5/concrete5
- CVE-2020-13970Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature.shopware/platform
- CVE-2020-13971In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScrshopware/platform
- CVE-2020-13997In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handlinshopware/core · shopware/platform
- CVE-2020-16094In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursi
- CVE-2020-15417This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 NETGEAR R6700
- CVE-2020-10930This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_NETGEAR R6700
- CVE-2020-10923This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rNETGEAR R6700
- CVE-2020-15899Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.grin
- CVE-2020-7685Insecure DefaultsUmbracoForms
- CVE-2020-15863hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow.
- CVE-2020-15900A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52.
- CVE-2020-15408An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8.
- CVE-2020-13919emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP re
- CVE-2020-13918Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (t
- CVE-2020-13917rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a cr
- CVE-2020-13916A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthe
- CVE-2020-13915Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credenti
- CVE-2020-13914webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the
- CVE-2020-13913An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthe
- CVE-2020-15715rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.ph
- CVE-2020-15714rConfig 3.9.5 is vulnerable to SQL injection.
- CVE-2020-15713rConfig 3.9.5 is vulnerable to SQL injection.
- CVE-2020-15712rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system.
- CVE-2020-4465IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an errIBM MQ Appliance
- CVE-2020-4375IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memoIBM MQ Appliance
- CVE-2020-4319IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated userIBM MQ Appliance
- CVE-2020-4318IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics arIBM Intelligent Operations Center for Emergency Manageme… +1
- CVE-2020-4317IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics arIBM Intelligent Operations Center · IBM Water Operations fo…
- CVE-2019-4731IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace.IBM MQ Appliance
- CVE-2020-16088iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a publi