Archive

14 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /14 August 2020 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 10.0

CVE-2020-1350 Exploited Public exploit EPSS 97%

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows

Jul 14, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2020-1948 Public exploit EPSS 16%

Deserialization of Untrusted Data in Apache Dubbo

This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will e…

org.apache.dubbo:dubbo org.apache.dubbo:dubbo-common Maven

Jul 14, 2020
Critical 9.8

CVE-2020-13925 Public exploit EPSS 20%

Command Injection in Kylin

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to exe…

org.apache.kylin:kylin-server-base Maven

Jul 14, 2020
Critical 10.0

CVE-2020-6287 Exploited Public exploit Scanner template EPSS 95%

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication …

SAP SAP NetWeaver AS JAVA (LM Configuration Wizard)

Jul 14, 2020
KEV Nov 3, 2021