# CVEs published 2020-08-17 169 CVEs were published on August 17, 2020: 5 critical, 75 high. 4 are now in CISA KEV. Days are UTC. - [CVE-2020-15152](https://cve.now/CVE-2020-15152.md): Server-Side Request Forgery in ftp-srv (CVSS 9.1, autovance ftp-srv · ftp-srv) - [CVE-2020-12480](https://cve.now/CVE-2020-12480.md): In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parame (no CVSS, com.typesafe.play:play\_2.12) - [CVE-2020-13183](https://cve.now/CVE-2020-13183.md): Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active se (no CVSS, Teradici PCoIP Management Console) - [CVE-2020-13933](https://cve.now/CVE-2020-13933.md): Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass. (no CVSS, Apache Shiro · org.apache.shiro:shiro-core) - [CVE-2020-1591](https://cve.now/CVE-2020-1591.md): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (no CVSS, Microsoft Dynamics 365 (on-premises)) - [CVE-2020-1597](https://cve.now/CVE-2020-1597.md): ASP.NET Core Denial of Service Vulnerability (no CVSS, Microsoft ASP.NET Core · Microsoft Visual Studio +12) - [CVE-2020-1585](https://cve.now/CVE-2020-1585.md): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1587](https://cve.now/CVE-2020-1587.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1583](https://cve.now/CVE-2020-1583.md): Microsoft Word Information Disclosure Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft Share… +3) - [CVE-2020-1584](https://cve.now/CVE-2020-1584.md): Windows dnsrslvr.dll Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1580](https://cve.now/CVE-2020-1580.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-1581](https://cve.now/CVE-2020-1581.md): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (no CVSS, Microsoft Office 2013 Click-to-Run · Microsoft Office +1) - [CVE-2020-1582](https://cve.now/CVE-2020-1582.md): Microsoft Access Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Access 2013 Service Pack · Microsoft Office +2) - [CVE-2020-1578](https://cve.now/CVE-2020-1578.md): Windows Kernel Information Disclosure Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1579](https://cve.now/CVE-2020-1579.md): Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1574](https://cve.now/CVE-2020-1574.md): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-1577](https://cve.now/CVE-2020-1577.md): DirectWrite Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1571](https://cve.now/CVE-2020-1571.md): Windows Setup Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows) - [CVE-2020-1573](https://cve.now/CVE-2020-1573.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2) - [CVE-2020-1569](https://cve.now/CVE-2020-1569.md): Microsoft Edge Memory Corruption Vulnerability (CVSS 7.8, Microsoft Edge) - [CVE-2020-1570](https://cve.now/CVE-2020-1570.md): Scripting Engine Memory Corruption Vulnerability (no CVSS, Microsoft Internet Explorer) - [CVE-2020-1567](https://cve.now/CVE-2020-1567.md): MSHTML Engine Remote Code Execution Vulnerability (CVSS 4.2, Microsoft Internet Explorer) - [CVE-2020-1568](https://cve.now/CVE-2020-1568.md): Microsoft Edge PDF Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Edge) - [CVE-2020-1565](https://cve.now/CVE-2020-1565.md): Windows Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2020-1566](https://cve.now/CVE-2020-1566.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 4.2, Microsoft Windows) - [CVE-2020-1563](https://cve.now/CVE-2020-1563.md): Microsoft Office Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft 365 Apps for Enterprise) - [CVE-2020-1564](https://cve.now/CVE-2020-1564.md): Jet Database Engine Remote Code Execution Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1561](https://cve.now/CVE-2020-1561.md): Microsoft Graphics Components Remote Code Execution Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1562](https://cve.now/CVE-2020-1562.md): Microsoft Graphics Components Remote Code Execution Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1558](https://cve.now/CVE-2020-1558.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1560](https://cve.now/CVE-2020-1560.md): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1556](https://cve.now/CVE-2020-1556.md): Windows WalletService Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1557](https://cve.now/CVE-2020-1557.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Windows) - [CVE-2020-1553](https://cve.now/CVE-2020-1553.md): Windows Runtime Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1554](https://cve.now/CVE-2020-1554.md): Media Foundation Memory Corruption Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1555](https://cve.now/CVE-2020-1555.md): Scripting Engine Memory Corruption Vulnerability (no CVSS, Microsoft ChakraCore · Microsoft Edge) - [CVE-2020-1551](https://cve.now/CVE-2020-1551.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1552](https://cve.now/CVE-2020-1552.md): Windows Work Folder Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2020-1549](https://cve.now/CVE-2020-1549.md): Windows CDP User Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1550](https://cve.now/CVE-2020-1550.md): Windows CDP User Components Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1547](https://cve.now/CVE-2020-1547.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1548](https://cve.now/CVE-2020-1548.md): Windows WaasMedic Service Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1545](https://cve.now/CVE-2020-1545.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1546](https://cve.now/CVE-2020-1546.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1543](https://cve.now/CVE-2020-1543.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1544](https://cve.now/CVE-2020-1544.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1541](https://cve.now/CVE-2020-1541.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1542](https://cve.now/CVE-2020-1542.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1539](https://cve.now/CVE-2020-1539.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1540](https://cve.now/CVE-2020-1540.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1536](https://cve.now/CVE-2020-1536.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1537](https://cve.now/CVE-2020-1537.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1538](https://cve.now/CVE-2020-1538.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1534](https://cve.now/CVE-2020-1534.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1535](https://cve.now/CVE-2020-1535.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1531](https://cve.now/CVE-2020-1531.md): Windows Accounts Control Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1533](https://cve.now/CVE-2020-1533.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1529](https://cve.now/CVE-2020-1529.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1530](https://cve.now/CVE-2020-1530.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1527](https://cve.now/CVE-2020-1527.md): Windows Custom Protocol Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1528](https://cve.now/CVE-2020-1528.md): Windows Radio Manager API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1525](https://cve.now/CVE-2020-1525.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1526](https://cve.now/CVE-2020-1526.md): Windows Network Connection Broker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1522](https://cve.now/CVE-2020-1522.md): Windows Speech Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1524](https://cve.now/CVE-2020-1524.md): Windows Speech Shell Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1520](https://cve.now/CVE-2020-1520.md): Windows Font Driver Host Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1521](https://cve.now/CVE-2020-1521.md): Windows Speech Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1518](https://cve.now/CVE-2020-1518.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1519](https://cve.now/CVE-2020-1519.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1516](https://cve.now/CVE-2020-1516.md): Windows Work Folders Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1517](https://cve.now/CVE-2020-1517.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1513](https://cve.now/CVE-2020-1513.md): Windows CSC Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1515](https://cve.now/CVE-2020-1515.md): Windows Telephony Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1511](https://cve.now/CVE-2020-1511.md): Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1512](https://cve.now/CVE-2020-1512.md): Windows State Repository Service Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1505](https://cve.now/CVE-2020-1505.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-1509](https://cve.now/CVE-2020-1509.md): Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1510](https://cve.now/CVE-2020-1510.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-1503](https://cve.now/CVE-2020-1503.md): Microsoft Word Information Disclosure Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +3) - [CVE-2020-1504](https://cve.now/CVE-2020-1504.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Excel 2010 Service Pack) - [CVE-2020-1501](https://cve.now/CVE-2020-1501.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-1502](https://cve.now/CVE-2020-1502.md): Microsoft Word Information Disclosure Vulnerability (no CVSS, Microsoft SharePoint Server · Microsoft Office +1) - [CVE-2020-1499](https://cve.now/CVE-2020-1499.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2) - [CVE-2020-1500](https://cve.now/CVE-2020-1500.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…) - [CVE-2020-1497](https://cve.now/CVE-2020-1497.md): Microsoft Excel Information Disclosure Vulnerability (no CVSS, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-1498](https://cve.now/CVE-2020-1498.md): Microsoft Excel Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-1494](https://cve.now/CVE-2020-1494.md): Microsoft Excel Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-1495](https://cve.now/CVE-2020-1495.md): Microsoft Excel Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Server 2010 Service Pack · Microsof… +4) - [CVE-2020-1496](https://cve.now/CVE-2020-1496.md): Microsoft Excel Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-1492](https://cve.now/CVE-2020-1492.md): Media Foundation Memory Corruption Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1489](https://cve.now/CVE-2020-1489.md): Windows CSC Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1490](https://cve.now/CVE-2020-1490.md): Windows Storage Service Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1487](https://cve.now/CVE-2020-1487.md): Media Foundation Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1488](https://cve.now/CVE-2020-1488.md): Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2020-1485](https://cve.now/CVE-2020-1485.md): Windows Image Acquisition Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-1486](https://cve.now/CVE-2020-1486.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1483](https://cve.now/CVE-2020-1483.md): Microsoft Outlook Memory Corruption Vulnerability (CVSS 5.0, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-1484](https://cve.now/CVE-2020-1484.md): Windows Work Folders Service Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1479](https://cve.now/CVE-2020-1479.md): DirectX Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1480](https://cve.now/CVE-2020-1480.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1477](https://cve.now/CVE-2020-1477.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2020-1478](https://cve.now/CVE-2020-1478.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1475](https://cve.now/CVE-2020-1475.md): Windows Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1476](https://cve.now/CVE-2020-1476.md): ASP.NET and .NET Elevation of Privilege Vulnerability (no CVSS, Microsoft .NET Framework) - [CVE-2020-1472](https://cve.now/CVE-2020-1472.md): Netlogon Elevation of Privilege Vulnerability (CVSS 5.5, KEV, Microsoft Windows Server · Microsoft Windows Server,) - [CVE-2020-1473](https://cve.now/CVE-2020-1473.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2020-1474](https://cve.now/CVE-2020-1474.md): Windows Image Acquisition Service Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1467](https://cve.now/CVE-2020-1467.md): Windows Hard Link Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Windows) - [CVE-2020-1470](https://cve.now/CVE-2020-1470.md): Windows Work Folders Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1464](https://cve.now/CVE-2020-1464.md): Windows Spoofing Vulnerability (CVSS 7.8, KEV, Microsoft Windows) - [CVE-2020-1466](https://cve.now/CVE-2020-1466.md): Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability (CVSS 7.8, Microsoft Windows Server) - [CVE-2020-1455](https://cve.now/CVE-2020-1455.md): Microsoft SQL Server Management Studio Denial of Service Vulnerability (CVSS 5.3, Microsoft SQL Server Management Studio) - [CVE-2020-1459](https://cve.now/CVE-2020-1459.md): Windows ARM Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2020-1383](https://cve.now/CVE-2020-1383.md): Windows RRAS Service Information Disclosure Vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-1417](https://cve.now/CVE-2020-1417.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-1379](https://cve.now/CVE-2020-1379.md): Media Foundation Memory Corruption Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-1380](https://cve.now/CVE-2020-1380.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.8, KEV, Microsoft Internet Explorer) - [CVE-2020-1377](https://cve.now/CVE-2020-1377.md): Windows Registry Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1378](https://cve.now/CVE-2020-1378.md): Windows Registry Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2020-1182](https://cve.now/CVE-2020-1182.md): Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Dynamics 365 for Finance and Operations) - [CVE-2020-1337](https://cve.now/CVE-2020-1337.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-1339](https://cve.now/CVE-2020-1339.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-0604](https://cve.now/CVE-2020-0604.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code) - [CVE-2020-1046](https://cve.now/CVE-2020-1046.md): .NET Framework Remote Code Execution Vulnerability (no CVSS, Microsoft .NET Framework) - [CVE-2020-3346](https://cve.now/CVE-2020-3346.md): Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Unified Communications Manager) - [CVE-2020-3363](https://cve.now/CVE-2020-3363.md): Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability (CVSS 8.6, Cisco Small Business 250 Series Smart Switches Software) - [CVE-2020-3412](https://cve.now/CVE-2020-3412.md): Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability (CVSS 4.3, Cisco Webex Meetings) - [CVE-2020-3411](https://cve.now/CVE-2020-3411.md): Cisco DNA Center Information Disclosure Vulnerability (CVSS 7.5, Cisco Digital Network Architecture Center) - [CVE-2020-3413](https://cve.now/CVE-2020-3413.md): Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability (CVSS 4.3, Cisco Webex Meetings) - [CVE-2020-3433](https://cve.now/CVE-2020-3433.md): Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability (CVSS 7.8, KEV, Cisco AnyConnect Secure Mobility Client) - [CVE-2020-3434](https://cve.now/CVE-2020-3434.md): Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability (CVSS 5.5, Cisco AnyConnect Secure Mobility Client) - [CVE-2020-3435](https://cve.now/CVE-2020-3435.md): Cisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability (CVSS 5.5, Cisco AnyConnect Secure Mobility Client) - [CVE-2020-3447](https://cve.now/CVE-2020-3447.md): Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability (CVSS 5.5, Cisco Email Security Appliance) - [CVE-2020-3448](https://cve.now/CVE-2020-3448.md): Cisco Cyber Vision Center Software Access Control Bypass Vulnerability (CVSS 5.8, Cisco Cyber Vision) - [CVE-2020-3449](https://cve.now/CVE-2020-3449.md): Cisco IOS XR Software Additional Paths Denial of Service Vulnerability (CVSS 4.3, Cisco IOS XR Software) - [CVE-2020-3463](https://cve.now/CVE-2020-3463.md): Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Webex Meetings) - [CVE-2020-3464](https://cve.now/CVE-2020-3464.md): Cisco UCS Director Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco UCS Director) - [CVE-2020-3472](https://cve.now/CVE-2020-3472.md): Cisco Webex Meetings User Email Address Information Disclosure Vulnerability (CVSS 5.0, Cisco Webex Meetings) - [CVE-2020-3500](https://cve.now/CVE-2020-3500.md): Cisco StarOS IPv6 Denial of Service Vulnerability (CVSS 6.8, Cisco ASR 5000 Series Software) - [CVE-2020-3501](https://cve.now/CVE-2020-3501.md): Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities (CVSS 4.1, Cisco Webex Meetings) - [CVE-2020-3502](https://cve.now/CVE-2020-3502.md): Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities (CVSS 4.1, Cisco Webex Meetings) - [CVE-2020-7704](https://cve.now/CVE-2020-7704.md): Prototype Pollution (CVSS 9.8, linux-cmdline) - [CVE-2020-24369](https://cve.now/CVE-2020-24369.md): ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference. (no CVSS) - [CVE-2020-24371](https://cve.now/CVE-2020-24371.md): lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectga (no CVSS) - [CVE-2020-24372](https://cve.now/CVE-2020-24372.md): LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj\_err\_run in lj\_err.c. (no CVSS) - [CVE-2020-24208](https://cve.now/CVE-2020-24208.md): A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authenti (no CVSS) - [CVE-2020-24220](https://cve.now/CVE-2020-24220.md): ShopXO v1.8.1 has a command execution vulnerability. (no CVSS) - [CVE-2020-13122](https://cve.now/CVE-2020-13122.md): The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to comm (no CVSS) - [CVE-2020-8233](https://cve.now/CVE-2020-8233.md): A command injection vulnerability exists in EdgeSwitch firmware \