CVEs published September 10, 2020
43 CVEs were published on September 10, 2020: 5 critical, 13 high.
- Published
- 43
- Critical
- 5
- High
- 13
- Medium
- 11
- Low
- 2
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Adobe Experience Manager
- 11
- Adobe InDesign
- 5
- McAfee MA for Windows
- 3
- Adobe FrameMaker
- 2
- Apache ActiveMQ · org.apache.activemq:activemq-parent
- 2
- [UNKNOWN] kernel
- 1
- atftpd
- 1
- Atop Technology 3G/4G LTE Cellular to Ethernet and Seria… +5
- 1
- bcoin
- 1
- Canonical ubuntu-ui-toolkit
- 1
Critical 5
- CVE-2020-9734Stored XSS in AEM Forms componentAdobe Experience Manager
- CVE-2020-9742Reflected XSS in AEM Inbox moduleAdobe Experience Manager
- CVE-2020-9741Stored XSS in AEM Forms ComponentsAdobe Experience Manager
- CVE-2020-9732Stored XSS in AEM Sites ComponentsAdobe Experience Manager
- CVE-2020-9740Stored XSS in AEM Design Importer ComponentAdobe Experience Manager
High 13
- CVE-2020-15170Missing access control in apollo-adminservicectripcorp apollo · com.ctrip.framework.apollo:apollo-core
- CVE-2020-9725FrameMaker File Parsing Stack-based Buffer OverflowAdobe FrameMaker
- CVE-2020-9727Out-of-bounds memory access could lead to code executionAdobe InDesign
- CVE-2020-9729Out-of-bounds memory access could lead to code executionAdobe InDesign
- CVE-2020-9730Out-of-bounds memory access could lead to code executionAdobe InDesign
- CVE-2020-9731Out-of-bounds memory access could lead to code executionAdobe InDesign
- CVE-2020-9728Out-of-bounds memory access could lead to code executionAdobe InDesign
- CVE-2020-17408This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1.NEC ExpressCluster
- CVE-2020-9733Sensitive information disclosure possible in AEMAdobe Experience Manager
- CVE-2020-6097An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1.atftpd
- CVE-2020-7314Privilege Escalation vulnerability in McAfee DXL for MacMcAfee DXL for Mac shipped with MA
- CVE-2020-7311Privilege Escalation vulnerability in MA for WindowsMcAfee MA for Windows
- CVE-2020-7312DLL Search Order Hijacking in MA for WindowsMcAfee MA for Windows
Medium, low and unrated 25
- CVE-2014-1420Insecure temp file usage in Ubuntu UI toolkitCanonical ubuntu-ui-toolkit
- CVE-2020-15171Users with SCRIPT rights can execute arbitrary code in XWikixwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2020-9726FrameMaker File Parsing Out-Of-Bounds Read VulnerabilityAdobe FrameMaker
- CVE-2020-15168File size limit bypass in node-fetchnode-fetch
- CVE-2020-11998A regression has been introduced in the commit preventing JMX re-bind.Apache ActiveMQ · org.apache.activemq:activemq-parent
- CVE-2020-15024An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562.
- CVE-2020-4578IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2020-14198Bitcoin Core 0.20.0 allows remote denial of service.
- CVE-2020-9743HTML injection in AEM's content editor componentAdobe Experience Manager
- CVE-2020-9736Stored XSS in AEM's Content Repository Development EnvironmentAdobe Experience Manager
- CVE-2020-9735Stored XSS in AEM's Content Repository Development EnvironmentAdobe Experience Manager
- CVE-2020-9738Stored XSS in AEM's Content Repository Development EnvironmentAdobe Experience Manager
- CVE-2020-9737Stored XSS in AEM's Content Repository Development EnvironmentAdobe Experience Manager
- CVE-2018-17145Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction bcoin
- CVE-2020-24582Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
- CVE-2020-10773A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the[UNKNOWN] kernel
- CVE-2020-8758Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, Intel(R) AMT and Intel(R) ISM
- CVE-2020-5780Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows aIcegram Email Subscribers & Newsletters Plugin for WordPress
- CVE-2020-25221get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counti
- CVE-2020-24739A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account.
- CVE-2020-7315DLL Injection vulnerability in MA for WindowsMcAfee MA for Windows
- CVE-2020-24552Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command InjectionAtop Technology 3G/4G LTE Cellular to Ethernet and Seria… +5
- CVE-2020-24655A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny
- CVE-2020-25220The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was n
- CVE-2020-13920Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry.Apache ActiveMQ · org.apache.activemq:activemq-parent