# CVEs published 2020-08-06

29 CVEs were published on August 6, 2020: 3 critical, 4 high. Days are UTC.

- [CVE-2020-16225](https://cve.now/CVE-2020-16225.md): Delta Electronics TPEditor Versions 1.97 and prior. (no CVSS, Delta Electronics TPEditor)
- [CVE-2020-16227](https://cve.now/CVE-2020-16227.md): Delta Electronics TPEditor Versions 1.97 and prior. (no CVSS, Delta Electronics TPEditor)
- [CVE-2020-16221](https://cve.now/CVE-2020-16221.md): Delta Electronics TPEditor Versions 1.97 and prior. (no CVSS, Delta Electronics TPEditor)
- [CVE-2020-16223](https://cve.now/CVE-2020-16223.md): Delta Electronics TPEditor Versions 1.97 and prior. (no CVSS, Delta Electronics TPEditor)
- [CVE-2020-16219](https://cve.now/CVE-2020-16219.md): Delta Electronics TPEditor Versions 1.97 and prior. (no CVSS, Delta Electronics TPEditor)
- [CVE-2020-15702](https://cve.now/CVE-2020-15702.md): TOCTOU in apport (CVSS 7.0, Canonical apport)
- [CVE-2020-15701](https://cve.now/CVE-2020-15701.md): Unhandled exception in apport (CVSS 5.5, Canonical apport)
- [CVE-2020-11937](https://cve.now/CVE-2020-11937.md): Resource exhaustion vulnerability in whoopsie (CVSS 5.5, Canonical whoopsie)
- [CVE-2020-15136](https://cve.now/CVE-2020-15136.md): Improper authentication in etcd (CVSS 6.5, etcd-io etcd · go.etcd.io/etcd)
- [CVE-2020-15114](https://cve.now/CVE-2020-15114.md): Denial of Service in etcd (CVSS 7.7, etcd-io etcd · go.etcd.io/etcd)
- [CVE-2020-15115](https://cve.now/CVE-2020-15115.md): No minimum password length in etcd (CVSS 5.8, etcd-io etcd · go.etcd.io/etcd/client/v3)
- [CVE-2020-13793](https://cve.now/CVE-2020-13793.md): Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key. (no CVSS)
- [CVE-2020-12441](https://cve.now/CVE-2020-12441.md): Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemote (no CVSS)
- [CVE-2020-16229](https://cve.now/CVE-2020-16229.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16207](https://cve.now/CVE-2020-16207.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16211](https://cve.now/CVE-2020-16211.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16213](https://cve.now/CVE-2020-16213.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16215](https://cve.now/CVE-2020-16215.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16217](https://cve.now/CVE-2020-16217.md): Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. (no CVSS, Advantech WebAccess HMI Designer)
- [CVE-2020-16845](https://cve.now/CVE-2020-16845.md): Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. (no CVSS, stdlib)
- [CVE-2020-7817](https://cve.now/CVE-2020-7817.md): MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). (CVSS 5.5, ActiveSoft MyBrowserPlus)
- [CVE-2020-13365](https://cve.now/CVE-2020-13365.md): Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account (CVSS 8.4)
- [CVE-2020-13364](https://cve.now/CVE-2020-13364.md): A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. (CVSS 6.5)
- [CVE-2020-7459](https://cve.now/CVE-2020-7459.md): In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p (no CVSS, FreeBSD)
- [CVE-2020-7460](https://cve.now/CVE-2020-7460.md): In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p (no CVSS, FreeBSD)
- [CVE-2020-7361](https://cve.now/CVE-2020-7361.md): ZenTao Pro Command Injection (CVSS 9.6, EasyCorp ZenTao Pro)
- [CVE-2020-7357](https://cve.now/CVE-2020-7357.md): Cayin CMS Command Injection (CVSS 9.6, Cayin Technology Cayin CMS-SE · Cayin Technology Cayin C… +3)
- [CVE-2020-7356](https://cve.now/CVE-2020-7356.md): Cayin xPost SQL Injection (CVSS 10.0, Cayin Technology Cayin xPost)
- [CVE-2020-7352](https://cve.now/CVE-2020-7352.md): GOG Galaxy GalaxyClientService Privilege Escalation (CVSS 8.4, GOG GalaxyClientService)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.