Archive

9 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /9 August 2020 →

All Critical High Medium Low Exploited only Public exploit

51 results · Feed

Unscored —

CVE-2020-12418

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malici…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, …

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2018-12371

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jul 9, 2020
Unscored —

CVE-2020-7458

In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-…

Jul 9, 2020
Unscored —

CVE-2020-7457 Public exploit EPSS 33%

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and …

Jul 9, 2020
High 7.1

CVE-2020-5366

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious u…

Dell Integrated Dell Remote Access Controller (iDRAC)

Jul 9, 2020
Medium 5.3

CVE-2020-7693 Public exploit

Denial of Service (DoS)

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

sockjs npm

Jul 9, 2020
High 7.4

CVE-2020-7692

Improper Authorization

PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization requ…

com.google.oauth-client:google-oauth-client google-oauth-client-java google-oauth-client-java Debian Ubuntu Maven

Jul 9, 2020
Unscored —

CVE-2020-9376 Public exploit Scanner template EPSS 18%

D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOT…

Jul 9, 2020
High 8.8

CVE-2020-9377 Exploited EPSS 22%

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability on…

Jul 9, 2020
KEV Mar 25, 2022
Unscored —

CVE-2020-5604

Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a r…

Mercari Android App 'Mercari' (Japan version) Android

Jul 9, 2020