CVEs published August 17, 2020
169 CVEs were published on August 17, 2020: 5 critical, 75 high. 4 are now in CISA KEV.
- Published
- 169
- Critical
- 5
- High
- 75
- Medium
- 28
- Low
- 0
- Unrated
- 61
- Now in CISA KEV
- 4
- Fix available
- 11
Most affected products
- Microsoft Windows
- 86
- Cisco Webex Meetings
- 6
- Microsoft Office · Microsoft 365 Apps for Enterprise +1
- 6
- Citrix XenMobile Server
- 5
- Cisco AnyConnect Secure Mobility Client
- 3
- Microsoft Internet Explorer
- 3
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 3
- EdgeSwitch firmware v1.9.0 and prior
- 2
- FusionCompute
- 2
- Microsoft .NET Framework
- 2
Critical 5
High 75
- CVE-2020-1583Microsoft Word Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +3
- CVE-2020-1584Windows dnsrslvr.dll Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1582Microsoft Access Remote Code Execution VulnerabilityMicrosoft Access 2013 Service Pack · Microsoft Office +2
- CVE-2020-1577DirectWrite Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1571Windows Setup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1569Microsoft Edge Memory Corruption VulnerabilityMicrosoft Edge
- CVE-2020-1568Microsoft Edge PDF Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2020-1565Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1558Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1560Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1557Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1551Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1552Windows Work Folder Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1549Windows CDP User Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1547Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1548Windows WaasMedic Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1545Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1546Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1543Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1544Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1541Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1542Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1539Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1540Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1536Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1537Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1538Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1534Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1535Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1531Windows Accounts Control Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1533Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1529Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1530Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1527Windows Custom Protocol Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1528Windows Radio Manager API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1525Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1526Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1522Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1524Windows Speech Shell Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1520Windows Font Driver Host Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1521Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1518Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1519Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1516Windows Work Folders Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1517Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1513Windows CSC Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1515Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1511Connected User Experiences and Telemetry Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1512Windows State Repository Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1509Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1504Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel 2010 Service Pack
- CVE-2020-1489Windows CSC Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1487Media Foundation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1488Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1486Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1480Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1477Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1478Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1475Windows Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1473Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1474Windows Image Acquisition Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1470Windows Work Folders Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1464Windows Spoofing VulnerabilityMicrosoft Windows
- CVE-2020-1466Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2020-1459Windows ARM Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1380Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1377Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1378Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1182Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 for Finance and Operations
- CVE-2020-1337Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1339Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-0604Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2020-3363Cisco Small Business Smart and Managed Switches Denial of Service VulnerabilityCisco Small Business 250 Series Smart Switches Software
- CVE-2020-3411Cisco DNA Center Information Disclosure VulnerabilityCisco Digital Network Architecture Center
- CVE-2020-3433Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCisco AnyConnect Secure Mobility Client
Medium, low and unrated 89
- CVE-2020-12480In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain paramecom.typesafe.play:play_2.12
- CVE-2020-13183Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active seTeradici PCoIP Management Console
- CVE-2020-13933Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.Apache Shiro · org.apache.shiro:shiro-core
- CVE-2020-1591Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-1597ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +12
- CVE-2020-1585Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1587Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1580Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1581Microsoft Office Click-to-Run Elevation of Privilege VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft Office +1
- CVE-2020-1578Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1579Windows Function Discovery SSDP Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1574Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1573Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1570Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1567MSHTML Engine Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1566Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1563Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-1564Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1561Microsoft Graphics Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1562Microsoft Graphics Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1556Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1553Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1554Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1555Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge
- CVE-2020-1550Windows CDP User Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1505Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1510Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1503Microsoft Word Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +3
- CVE-2020-1501Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1502Microsoft Word Information Disclosure VulnerabilityMicrosoft SharePoint Server · Microsoft Office +1
- CVE-2020-1499Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1500Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1497Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1498Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1494Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1495Microsoft Excel Remote Code Execution VulnerabilityMicrosoft SharePoint Server 2010 Service Pack · Microsof… +4
- CVE-2020-1496Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1492Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1490Windows Storage Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1485Windows Image Acquisition Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1483Microsoft Outlook Memory Corruption VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1484Windows Work Folders Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1479DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1476ASP.NET and .NET Elevation of Privilege VulnerabilityMicrosoft .NET Framework
- CVE-2020-1472Netlogon Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-1455Microsoft SQL Server Management Studio Denial of Service VulnerabilityMicrosoft SQL Server Management Studio
- CVE-2020-1383Windows RRAS Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1417Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1379Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1046.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET Framework
- CVE-2020-3346Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCisco Unified Communications Manager
- CVE-2020-3412Cisco Webex Meetings Scheduled Meeting Template Creation VulnerabilityCisco Webex Meetings
- CVE-2020-3413Cisco Webex Meetings Scheduled Meeting Template Deletion VulnerabilityCisco Webex Meetings
- CVE-2020-3434Cisco AnyConnect Secure Mobility Client for Windows Denial of Service VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2020-3435Cisco AnyConnect Secure Mobility Client for Windows Profile Modification VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2020-3447Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure VulnerabilityCisco Email Security Appliance
- CVE-2020-3448Cisco Cyber Vision Center Software Access Control Bypass VulnerabilityCisco Cyber Vision
- CVE-2020-3449Cisco IOS XR Software Additional Paths Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2020-3463Cisco Webex Meetings Reflected Cross-Site Scripting VulnerabilityCisco Webex Meetings
- CVE-2020-3464Cisco UCS Director Stored Cross-Site Scripting VulnerabilityCisco UCS Director
- CVE-2020-3472Cisco Webex Meetings User Email Address Information Disclosure VulnerabilityCisco Webex Meetings
- CVE-2020-3500Cisco StarOS IPv6 Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2020-3501Cisco Webex Meetings Desktop App Information Disclosure VulnerabilitiesCisco Webex Meetings
- CVE-2020-3502Cisco Webex Meetings Desktop App Information Disclosure VulnerabilitiesCisco Webex Meetings
- CVE-2020-24369ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.
- CVE-2020-24371lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectga
- CVE-2020-24372LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.
- CVE-2020-24208A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authenti
- CVE-2020-24220ShopXO v1.8.1 has a command execution vulnerability.
- CVE-2020-13122The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to comm
- CVE-2020-8233A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shEdgeSwitch firmware v1.9.0 and prior
- CVE-2020-8232An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized EdgeSwitch firmware v1.9.0 and prior
- CVE-2020-8212Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10Citrix XenMobile Server
- CVE-2020-8211Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.Citrix XenMobile Server
- CVE-2020-8210Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile SCitrix XenMobile Server
- CVE-2020-8226A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.https://github.com/phpbb/phpbb · phpbb/phpbb
- CVE-2020-8209Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10Citrix XenMobile Server
- CVE-2020-8230A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed toDesktop Client
- CVE-2020-8208Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.Citrix XenMobile Server
- CVE-2020-9237Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability.Taurus-AL00B
- CVE-2020-9233FusionCompute 8.0.0 have an insufficient authentication vulnerability.FusionCompute
- CVE-2020-9241Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability.E6878-370
- CVE-2020-9103HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability.HUAWEI Mate
- CVE-2020-9242FusionCompute 8.0.0 have a command injection vulnerability.FusionCompute
- CVE-2020-12606An issue was discovered in DB Soft SGLAC before 20.05.001.
- CVE-2020-4686IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should IBM SAN Volume Controller and Storwize Family
- CVE-2020-13941Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0.Apache Solr · org.apache.solr:solr-parent
- CVE-2020-1493Microsoft Outlook Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-24370ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).