# CVEs published 2020-07-29

60 CVEs were published on July 29, 2020: 3 critical, 11 high. Days are UTC.

- [CVE-2020-16143](https://cve.now/CVE-2020-16143.md): The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current working directory. (no CVSS)
- [CVE-2020-16135](https://cve.now/CVE-2020-16135.md): libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh\_buffer\_new returns NULL. (no CVSS)
- [CVE-2017-18923](https://cve.now/CVE-2017-18923.md): beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials. (no CVSS)
- [CVE-2020-14308](https://cve.now/CVE-2020-14308.md): In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. (no CVSS, Grub)
- [CVE-2020-5763](https://cve.now/CVE-2020-5763.md): Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. (no CVSS, Grandstream HT800 Series)
- [CVE-2020-5762](https://cve.now/CVE-2020-5762.md): Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. (no CVSS, Grandstream HT800 Series)
- [CVE-2020-5761](https://cve.now/CVE-2020-5761.md): Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. (no CVSS, Grandstream HT800 Series)
- [CVE-2020-5760](https://cve.now/CVE-2020-5760.md): Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. (no CVSS, Grandstream HT800 Series)
- [CVE-2020-14316](https://cve.now/CVE-2020-14316.md): A flaw was found in kubevirt 0.29 and earlier. (no CVSS, kubevirt · kubevirt.io/kubevirt)
- [CVE-2020-16117](https://cve.now/CVE-2020-16117.md): In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an in (no CVSS)
- [CVE-2020-16118](https://cve.now/CVE-2020-16118.md): In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sen (no CVSS)
- [CVE-2020-15707](https://cve.now/CVE-2020-15707.md): GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. (CVSS 5.7, grub2 in Ubuntu)
- [CVE-2020-15706](https://cve.now/CVE-2020-15706.md): GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. (CVSS 6.4, grub2 in Ubuntu)
- [CVE-2020-15705](https://cve.now/CVE-2020-15705.md): GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim (CVSS 6.4, grub2 in Ubuntu)
- [CVE-2020-15588](https://cve.now/CVE-2020-15588.md): An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. (no CVSS)
- [CVE-2019-20033](https://cve.now/CVE-2019-20033.md): On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access t (no CVSS)
- [CVE-2019-20032](https://cve.now/CVE-2019-20032.md): An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all ve (no CVSS)
- [CVE-2019-20031](https://cve.now/CVE-2019-20031.md): NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts i (no CVSS)
- [CVE-2019-20030](https://cve.now/CVE-2019-20030.md): An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to (no CVSS)
- [CVE-2019-20029](https://cve.now/CVE-2019-20029.md): An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of (no CVSS)
- [CVE-2019-20028](https://cve.now/CVE-2019-20028.md): Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticate (no CVSS)
- [CVE-2019-20027](https://cve.now/CVE-2019-20027.md): Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if in (no CVSS)
- [CVE-2019-20026](https://cve.now/CVE-2019-20026.md): The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames a (no CVSS)
- [CVE-2019-20025](https://cve.now/CVE-2019-20025.md): Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with (no CVSS)
- [CVE-2020-11934](https://cve.now/CVE-2020-11934.md): Sandbox escape vulnerability via snapctl user-open (xdg-open) (CVSS 5.9, Canonical snapd)
- [CVE-2020-11933](https://cve.now/CVE-2020-11933.md): local snapd exploit through cloud-init (CVSS 7.3, Canonical snapd · Canonical core)
- [CVE-2020-15125](https://cve.now/CVE-2020-15125.md): Authorization header is not sanitized in an error object in auth0 (CVSS 7.7, node-auth0 · auth0)
- [CVE-2020-15086](https://cve.now/CVE-2020-15086.md): Potential Remote Code Execution in TYPO3 with mediace extension (CVSS 9.8, FriendsOfTYPO3 mediace · friendsoftypo3/mediace)
- [CVE-2020-15098](https://cve.now/CVE-2020-15098.md): Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS (CVSS 8.8, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2020-15099](https://cve.now/CVE-2020-15099.md): Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS (CVSS 8.1, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2020-13699](https://cve.now/CVE-2020-13699.md): TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. (no CVSS)
- [CVE-2020-8553](https://cve.now/CVE-2020-8553.md): Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names (CVSS 5.9, Kubernetes ingress-nginx · k8s.io/ingress-nginx)
- [CVE-2020-16095](https://cve.now/CVE-2020-16095.md): The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS. (no CVSS, kitodo/presentation)
- [CVE-2020-4645](https://cve.now/CVE-2020-4645.md): IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics)
- [CVE-2020-4644](https://cve.now/CVE-2020-4644.md): IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. (CVSS 6.1, IBM Planning Analytics)
- [CVE-2020-4574](https://cve.now/CVE-2020-4574.md): IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to (CVSS 7.4, IBM Security Key Lifecycle Manager)
- [CVE-2020-4573](https://cve.now/CVE-2020-4573.md): IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. (CVSS 5.3, IBM Security Key Lifecycle Manager)
- [CVE-2020-4572](https://cve.now/CVE-2020-4572.md): IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error (CVSS 5.3, IBM Security Key Lifecycle Manager)
- [CVE-2020-4569](https://cve.now/CVE-2020-4569.md): IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input (CVSS 6.5, IBM Security Key Lifecycle Manager)
- [CVE-2020-4567](https://cve.now/CVE-2020-4567.md): IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force (CVSS 8.6, IBM Security Key Lifecycle Manager)
- [CVE-2020-4463](https://cve.now/CVE-2020-4463.md): IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. (CVSS 8.2, IBM Maximo Asset Management)
- [CVE-2020-14487](https://cve.now/CVE-2020-14487.md): OpenClinic GA (CVSS 9.4, open source OpenClinic GA)
- [CVE-2020-14486](https://cve.now/CVE-2020-14486.md): OpenClinic GA (CVSS 6.3, open source OpenClinic GA)
- [CVE-2020-2078](https://cve.now/CVE-2020-2078.md): Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. (no CVSS, SICK Package Analytics)
- [CVE-2020-2077](https://cve.now/CVE-2020-2077.md): SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. (no CVSS, SICK Package Analytics)
- [CVE-2020-2076](https://cve.now/CVE-2020-2076.md): SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with (no CVSS, SICK Package Analytics)
- [CVE-2020-14488](https://cve.now/CVE-2020-14488.md): OpenClinic GA (CVSS 8.8, open source OpenClinic GA)
- [CVE-2020-7697](https://cve.now/CVE-2020-7697.md): Command Injection (CVSS 9.8, mock2easy)
- [CVE-2020-7698](https://cve.now/CVE-2020-7698.md): Command Injection (CVSS 8.1, Gerapy)
- [CVE-2020-14492](https://cve.now/CVE-2020-14492.md): OpenClinic GA (CVSS 5.4, open source OpenClinic GA)
- [CVE-2020-14493](https://cve.now/CVE-2020-14493.md): OpenClinic GA (CVSS 8.8, open source OpenClinic GA)
- [CVE-2020-14490](https://cve.now/CVE-2020-14490.md): OpenClinic GA (CVSS 8.8, open source OpenClinic GA)
- [CVE-2020-14489](https://cve.now/CVE-2020-14489.md): OpenClinic GA (CVSS 6.2, open source OpenClinic GA)
- [CVE-2020-9691](https://cve.now/CVE-2020-9691.md): Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. (no CVSS, Adobe Magento · magento/community-edition +1)
- [CVE-2020-9692](https://cve.now/CVE-2020-9692.md): Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. (no CVSS, Adobe Magento · magento/community-edition)
- [CVE-2020-9690](https://cve.now/CVE-2020-9690.md): Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. (no CVSS, Adobe Magento · magento/community-edition)
- [CVE-2020-9689](https://cve.now/CVE-2020-9689.md): Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. (no CVSS, Adobe Magento · magento/community-edition +1)
- [CVE-2020-5614](https://cve.now/CVE-2020-5614.md): Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS, kujirahand KonaWiki)
- [CVE-2020-5613](https://cve.now/CVE-2020-5613.md): Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially craf (no CVSS, kujirahand KonaWiki)
- [CVE-2020-5612](https://cve.now/CVE-2020-5612.md): Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially craf (no CVSS, kujirahand KonaWiki)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.