# CVEs published 2020-08-07 31 CVEs were published on August 7, 2020: 0 critical, 3 high. Days are UTC. - [CVE-2020-15065](https://cve.now/CVE-2020-15065.md): DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device vi (no CVSS) - [CVE-2020-15064](https://cve.now/CVE-2020-15064.md): DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks (no CVSS) - [CVE-2020-15063](https://cve.now/CVE-2020-15063.md): DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web (no CVSS) - [CVE-2020-15062](https://cve.now/CVE-2020-15062.md): DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the (no CVSS) - [CVE-2020-15061](https://cve.now/CVE-2020-15061.md): Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device vi (no CVSS) - [CVE-2020-15060](https://cve.now/CVE-2020-15060.md): Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks (no CVSS) - [CVE-2020-15059](https://cve.now/CVE-2020-15059.md): Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web (no CVSS) - [CVE-2020-15058](https://cve.now/CVE-2020-15058.md): Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the (no CVSS) - [CVE-2019-7005](https://cve.now/CVE-2019-7005.md): Unauthenticated Information Disclosure Vulnerability in IP Office (CVSS 5.9, Avaya IP Office) - [CVE-2020-15057](https://cve.now/CVE-2020-15057.md): TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device vi (no CVSS) - [CVE-2020-15056](https://cve.now/CVE-2020-15056.md): TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks (no CVSS) - [CVE-2020-15055](https://cve.now/CVE-2020-15055.md): TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web (no CVSS) - [CVE-2020-15054](https://cve.now/CVE-2020-15054.md): TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the (no CVSS) - [CVE-2020-5412](https://cve.now/CVE-2020-5412.md): Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard (no CVSS, Spring by VMware Spring Cloud Netflix · org.springframework…) - [CVE-2020-15480](https://cve.now/CVE-2020-15480.md): An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. (no CVSS) - [CVE-2020-15479](https://cve.now/CVE-2020-15479.md): An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. (no CVSS) - [CVE-2020-17352](https://cve.now/CVE-2020-17352.md): Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated atta (no CVSS) - [CVE-2020-15907](https://cve.now/CVE-2020-15907.md): In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing (no CVSS) - [CVE-2020-16167](https://cve.now/CVE-2020-16167.md): Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to recei (no CVSS) - [CVE-2020-16169](https://cve.now/CVE-2020-16169.md): Authentication Bypass Using an Alternate Path or Channel in temi Robox OS prior to120, temi Android app up to 1.3.7931 allows remote attacke (no CVSS) - [CVE-2020-13376](https://cve.now/CVE-2020-13376.md): SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cook (no CVSS) - [CVE-2020-15138](https://cve.now/CVE-2020-15138.md): Cross-Site Scripting in Prism (CVSS 7.1, PrismJS prism · prismjs) - [CVE-2020-11852](https://cve.now/CVE-2020-11852.md): DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). (no CVSS, Secure Messaging Gateway ( SMG).) - [CVE-2020-11985](https://cve.now/CVE-2020-11985.md): IP address spoofing when proxying using mod\_remoteip and mod\_rewrite For configurations using proxying with mod\_remoteip and certain mod\_rew (no CVSS, Apache HTTP Server) - [CVE-2020-11993](https://cve.now/CVE-2020-11993.md): Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, loggin (no CVSS, Apache HTTP Server) - [CVE-2020-11984](https://cve.now/CVE-2020-11984.md): Apache HTTP server 2.4.32 to 2.4.44 mod\_proxy\_uwsgi info disclosure and possible RCE (no CVSS, Apache HTTP Server) - [CVE-2020-9490](https://cve.now/CVE-2020-9490.md): Apache HTTP Server versions 2.4.20 to 2.4.43. (no CVSS, Apache HTTP Server) - [CVE-2020-7810](https://cve.now/CVE-2020-7810.md): HandySoft ActiveX File Download and Execution Vulnerability (CVSS 8.8, Handysoft hslogin2.dll) - [CVE-2020-16168](https://cve.now/CVE-2020-16168.md): Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQ (no CVSS) - [CVE-2020-8025](https://cve.now/CVE-2020-8025.md): outdated entries in permissions profiles for /var/lib/pcp/tmp/\* may cause security issues (CVSS 6.1, SUSE Linux Enterprise Server 12-SP4 · SUSE Linux Enterpr… +3) - [CVE-2020-8026](https://cve.now/CVE-2020-8026.md): inn: non-root owned files (CVSS 8.4, openSUSE Leap · openSUSE Tumbleweed) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-08-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.