14 July 2020

7 results · Clear filters · Feed

• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2020-1040 Exploited

  A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inp…

  Microsoft Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-1948 Public exploit EPSS 16%

  Deserialization of Untrusted Data in Apache Dubbo

  This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will e…

  org.apache.dubbo:dubbo org.apache.dubbo:dubbo-common Maven
  Jul 14, 2020
• Critical 9.1
  CVE-2020-4512

  IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.

  IBM QRadar SIEM
  Jul 14, 2020
• Critical 9.8
  CVE-2020-13926

  SQL Injection in Kylin

  Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Us…

  org.apache.kylin:kylin-server-base Maven
  Jul 14, 2020
• Critical 9.8
  CVE-2020-13925 Public exploit EPSS 20%

  Command Injection in Kylin

  Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to exe…

  org.apache.kylin:kylin-server-base Maven
  Jul 14, 2020
• Critical 10.0
  CVE-2020-6287 Exploited Public exploit Scanner template EPSS 95%

  SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication …

  SAP SAP NetWeaver AS JAVA (LM Configuration Wizard)
  Jul 14, 2020

  KEV Nov 3, 2021