# CVEs published 2020-08-19

57 CVEs were published on August 19, 2020: 2 critical, 10 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-15119](https://cve.now/CVE-2020-15119.md): DOM-based XSS in auth0-lock (CVSS 6.4, auth0 lock · auth0-lock)
- [CVE-2020-8869](https://cve.now/CVE-2020-8869.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2020-8870](https://cve.now/CVE-2020-8870.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2020-15637](https://cve.now/CVE-2020-15637.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-15638](https://cve.now/CVE-2020-15638.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-15635](https://cve.now/CVE-2020-15635.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84\_10.0.58 (CVSS 8.8, NETGEAR R6700)
- [CVE-2020-15636](https://cve.now/CVE-2020-15636.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, (CVSS 8.1, NETGEAR Multiple Routers)
- [CVE-2020-15629](https://cve.now/CVE-2020-15629.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2020-15630](https://cve.now/CVE-2020-15630.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. (CVSS 3.3, Foxit Studio Photo)
- [CVE-2020-15634](https://cve.now/CVE-2020-15634.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmw (CVSS 6.3, NETGEAR R6700)
- [CVE-2020-15143](https://cve.now/CVE-2020-15143.md): Remote Code Execution in SyliusResourceBundle (CVSS 7.7, SyliusResourceBundle · sylius/resource-bundle)
- [CVE-2020-15146](https://cve.now/CVE-2020-15146.md): Remote Code Execution in SyliusResourceBundle (CVSS 9.6, SyliusResourceBundle · sylius/resource-bundle)
- [CVE-2020-13825](https://cve.now/CVE-2020-13825.md): A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, (no CVSS)
- [CVE-2020-13826](https://cve.now/CVE-2020-13826.md): A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via (no CVSS)
- [CVE-2020-15531](https://cve.now/CVE-2020-15531.md): Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. (no CVSS)
- [CVE-2020-15532](https://cve.now/CVE-2020-15532.md): Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. (no CVSS)
- [CVE-2020-15861](https://cve.now/CVE-2020-15861.md): Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following. (CVSS 7.8)
- [CVE-2020-17456](https://cve.now/CVE-2020-17456.md): SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system\_log.cgi page. (no CVSS)
- [CVE-2020-15151](https://cve.now/CVE-2020-15151.md): Observable Timing Discrepancy in OpenMage LTS (CVSS 8.0, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2020-15149](https://cve.now/CVE-2020-15149.md): Account takeover in NodeBB (CVSS 9.9, NodeBB)
- [CVE-2020-23574](https://cve.now/CVE-2020-23574.md): When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile\_name1.htm for (no CVSS)
- [CVE-2020-14356](https://cve.now/CVE-2020-14356.md): A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system (no CVSS, Kernel)
- [CVE-2020-11848](https://cve.now/CVE-2020-11848.md): Denial of service vulnerability on Micro Focus ArcSight Management Center. (no CVSS, ArcSight Management Center)
- [CVE-2020-24368](https://cve.now/CVE-2020-24368.md): Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary (no CVSS)
- [CVE-2020-9724](https://cve.now/CVE-2020-9724.md): Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. (no CVSS, Adobe Lightroom)
- [CVE-2020-9723](https://cve.now/CVE-2020-9723.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9722](https://cve.now/CVE-2020-9722.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9721](https://cve.now/CVE-2020-9721.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9720](https://cve.now/CVE-2020-9720.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9719](https://cve.now/CVE-2020-9719.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9718](https://cve.now/CVE-2020-9718.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9717](https://cve.now/CVE-2020-9717.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9716](https://cve.now/CVE-2020-9716.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9714](https://cve.now/CVE-2020-9714.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9712](https://cve.now/CVE-2020-9712.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9710](https://cve.now/CVE-2020-9710.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9697](https://cve.now/CVE-2020-9697.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9696](https://cve.now/CVE-2020-9696.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9694](https://cve.now/CVE-2020-9694.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9693](https://cve.now/CVE-2020-9693.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9707](https://cve.now/CVE-2020-9707.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9706](https://cve.now/CVE-2020-9706.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9705](https://cve.now/CVE-2020-9705.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9704](https://cve.now/CVE-2020-9704.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9703](https://cve.now/CVE-2020-9703.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9702](https://cve.now/CVE-2020-9702.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9701](https://cve.now/CVE-2020-9701.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9700](https://cve.now/CVE-2020-9700.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9699](https://cve.now/CVE-2020-9699.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-9698](https://cve.now/CVE-2020-9698.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-4653](https://cve.now/CVE-2020-4653.md): IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. (CVSS 6.8, IBM Planning Analytics)
- [CVE-2020-4648](https://cve.now/CVE-2020-4648.md): A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users witho (CVSS 6.5, IBM Planning Analytics)
- [CVE-2020-4381](https://cve.now/CVE-2020-4381.md): IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during (CVSS 5.3, IBM Elastic Storage Server)
- [CVE-2020-24381](https://cve.now/CVE-2020-24381.md): GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does (no CVSS)
- [CVE-2020-15862](https://cve.now/CVE-2020-15862.md): Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary com (no CVSS)
- [CVE-2020-24394](https://cve.now/CVE-2020-24394.md): In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesys (no CVSS)
- [CVE-2020-9715](https://cve.now/CVE-2020-9715.md): Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav (CVSS 7.8, KEV, Adobe Acrobat and Reader)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.