CVEs published September 4, 2020
39 CVEs were published on September 4, 2020: 2 critical, 6 high.
- Published
- 39
- Critical
- 2
- High
- 6
- Medium
- 13
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Cisco Jabber
- 4
- Cisco Enterprise NFV Infrastructure Software
- 2
- Cisco IOS XR Software
- 2
- Cisco Small Business RV Series Router Firmware
- 2
- Cisco Webex Meetings
- 2
- IBM InfoSphere Information Server
- 2
- Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance
- 1
- bestzip
- 1
- Cisco Email Security Appliance
- 1
- Cisco Firepower Extensible Operating System
- 1
Critical 2
High 6
- CVE-2020-4545IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link LIBM Aspera Connect
- CVE-2020-23834Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to a
- CVE-2020-3430Cisco Jabber for Windows Protocol Handler Command Injection VulnerabilityCisco Jabber
- CVE-2020-3473Cisco IOS XR Software Authenticated User Privilege Escalation VulnerabilityCisco IOS XR Software
- CVE-2020-3478Cisco Enterprise NFV Infrastructure Software File Overwrite VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2020-3530Cisco IOS XR Authenticated User Privilege Escalation VulnerabilityCisco IOS XR Software
Medium, low and unrated 31
- CVE-2020-24981An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.
- CVE-2020-24986Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager.
- CVE-2020-24987Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect aut
- CVE-2019-20916The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition hpip
- CVE-2020-24963An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
- CVE-2020-14008Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location
- CVE-2020-7299Sensitive Data Exposure vulnerability in McAfee True Key Windows ClientMcAfee True Key Windows client
- CVE-2020-24659An issue was discovered in GnuTLS before 3.6.15.
- CVE-2020-4702IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting.IBM InfoSphere Information Server
- CVE-2020-4632IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery.IBM InfoSphere Information Server
- CVE-2020-7119A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows anAruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance
- CVE-2020-25023An issue was discovered in Noise-Java through 2020-08-27.
- CVE-2020-25022An issue was discovered in Noise-Java through 2020-08-27.
- CVE-2020-25021An issue was discovered in Noise-Java through 2020-08-27.
- CVE-2020-12248In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer over
- CVE-2020-12247In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds
- CVE-2020-11493In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized
- CVE-2020-1911A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prFacebook Hermes · hermes-engine
- CVE-2020-3547Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure VulnerabilityCisco Web Security Appliance
- CVE-2020-3365Cisco Enterprise NFV Infrastructure Software Path Traversal VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2020-3451Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3453Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-3498Cisco Jabber for Windows Information Disclosure VulnerabilityCisco Jabber
- CVE-2020-3537Cisco Jabber for Windows Universal Naming Convention Link Handling VulnerabilityCisco Jabber
- CVE-2020-3541Cisco Webex Meetings Client for Windows, Webex Meetings Desktop App, and Webex Teams Information Disclosure VulnerabilityCisco Webex Meetings
- CVE-2020-3542Cisco Webex Training Unauthorized Meeting Join VulnerabilityCisco Webex Meetings
- CVE-2020-3545Cisco FXOS Software Buffer Overflow VulnerabilityCisco Firepower Extensible Operating System
- CVE-2020-3546Cisco Email Security Appliance Information Disclosure VulnerabilityCisco Email Security Appliance
- CVE-2020-24940An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2.illuminate/database
- CVE-2020-24941An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0.laravel/framework
- CVE-2019-3881Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations underubygem-bundler · bundler