CVEs published July 31, 2020
33 CVEs were published on July 31, 2020: 4 critical, 7 high.
- Published
- 33
- Critical
- 4
- High
- 7
- Medium
- 8
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Cisco Data Center Network Manager
- 9
- Cisco SD-WAN vManage
- 2
- The Grub2 Project grub2
- 2
- Ansible Tower
- 1
- Dell RSA Authentication Agent for Microsoft Windows
- 1
- faye
- 1
- faye-websocket
- 1
- FusionCompute
- 1
- HUAWEI P30
- 1
- Ignition
- 1
Critical 4
- CVE-2019-11286JMX Credential Deserialization in GemFireVMware Tanzu VMware GemFire · VMware Tanzu GemFire for VMs
- CVE-2020-3374Cisco SD-WAN vManage Software Authorization Bypass VulnerabilityCisco SD-WAN vManage
- CVE-2020-3375Cisco SD-WAN Solution Software Buffer Overflow VulnerabilityCisco SD-WAN vManage
- CVE-2020-3382Cisco Data Center Network Manager Authentication Bypass VulnerabilityCisco Data Center Network Manager
High 7
- CVE-2020-5384Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability.Dell RSA Authentication Agent for Microsoft Windows
- CVE-2020-15133Missing TLS certificate verification in Faye Websocketfaye-websocket
- CVE-2020-15134Missing TLS certificate verification in Fayefaye
- CVE-2020-3376Cisco Data Center Network Manager Authentication Bypass VulnerabilityCisco Data Center Network Manager
- CVE-2020-3383Cisco Data Center Network Manager Path Traversal VulnerabilityCisco Data Center Network Manager
- CVE-2020-3384Cisco Data Center Network Manager Command Injection VulnerabilityCisco Data Center Network Manager
- CVE-2020-3386Cisco Data Center Network Manager Improper Authorization VulnerabilityCisco Data Center Network Manager
Medium, low and unrated 22
- CVE-2020-14311There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems.The Grub2 Project grub2
- CVE-2020-14310There is an issue on grub2 before version 2.06 at function read_section_as_string().The Grub2 Project grub2
- CVE-2020-15871Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
- CVE-2020-15869Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
- CVE-2020-15870Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
- CVE-2020-5414App Autoscaler logs credentialsVMware Tanzu PCF Autoscaling · VMware Tanzu Operations M… +1
- CVE-2020-5413Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"Spring by VMware Spring Integration · org.springframework.i…
- CVE-2020-5396JMX Insecure Default Configuration in GemFireVMware Tanzu GemFire for VMs · VMware Tanzu VMware GemFire
- CVE-2020-15128Reliance on Cookies without validation in OctoberCMSoctobercms october · october/rain
- CVE-2020-12081An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2.
- CVE-2020-16136In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (acc
- CVE-2020-14337A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes.Ansible Tower
- CVE-2020-14334A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files.Red Hat Satellite
- CVE-2020-10731A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled.nova_libvirt container provided by the Red Hat OpenStack Pl…
- CVE-2020-14520The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (alIgnition
- CVE-2020-9248Huawei FusionComput 8.0.0 have an improper authorization vulnerability.FusionCompute
- CVE-2020-9249HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability.HUAWEI P30
- CVE-2020-3681Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code.
- CVE-2020-3462Cisco Data Center Network Manager SQL Injection VulnerabilityCisco Data Center Network Manager
- CVE-2020-3461Cisco Data Center Network Manager Information Disclosure VulnerabilityCisco Data Center Network Manager
- CVE-2020-3377Cisco Data Center Network Manager Command Injection VulnerabilityCisco Data Center Network Manager
- CVE-2020-3460Cisco Data Center Network Manager Cross-Site Scripting VulnerabilityCisco Data Center Network Manager