# CVEs published 2020-08-18

17 CVEs were published on August 18, 2020: 3 critical, 0 high. Days are UTC.

- [CVE-2020-23934](https://cve.now/CVE-2020-23934.md): An issue was discovered in RiteCMS 2.2.1. (no CVSS)
- [CVE-2020-15926](https://cve.now/CVE-2020-15926.md): Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the clien (no CVSS)
- [CVE-2020-5385](https://cve.now/CVE-2020-5385.md): Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability b (CVSS 6.7, Dell Encryption Enterprise)
- [CVE-2020-24032](https://cve.now/CVE-2020-24032.md): tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. (no CVSS)
- [CVE-2020-15865](https://cve.now/CVE-2020-15865.md): A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-6 (no CVSS)
- [CVE-2020-9415](https://cve.now/CVE-2020-9415.md): TIBCO Data Virtualization (CVSS 5.3, TIBCO Software TIBCO Data Virtualization)
- [CVE-2019-6258](https://cve.now/CVE-2019-6258.md): D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo (no CVSS)
- [CVE-2020-7018](https://cve.now/CVE-2020-7018.md): Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. (no CVSS, Elastic Enterprise Search)
- [CVE-2020-7019](https://cve.now/CVE-2020-7019.md): In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. (no CVSS, Elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2020-14936](https://cve.now/CVE-2020-14936.md): Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. (no CVSS)
- [CVE-2020-14935](https://cve.now/CVE-2020-14935.md): Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. (no CVSS)
- [CVE-2020-14934](https://cve.now/CVE-2020-14934.md): Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. (no CVSS)
- [CVE-2020-14937](https://cve.now/CVE-2020-14937.md): Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. (no CVSS)
- [CVE-2020-7708](https://cve.now/CVE-2020-7708.md): Prototype Pollution (CVSS 9.8, irrelon-path · @irrelon/path)
- [CVE-2020-7707](https://cve.now/CVE-2020-7707.md): Prototype Pollution (CVSS 9.8, property-expr)
- [CVE-2020-14333](https://cve.now/CVE-2020-14333.md): A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, (CVSS 6.3, The ovirt Project ovirt-engine)
- [CVE-2020-7706](https://cve.now/CVE-2020-7706.md): Prototype Pollution (CVSS 9.8, connie-lang)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.