Archive

14 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /14 August 2020 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Unscored —

CVE-2020-1362 Public exploit

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Critical 10.0

CVE-2020-1350 Exploited Public exploit EPSS 97%

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows

Jul 14, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-1147 Exploited Public exploit EPSS 96%

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet

Jul 14, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-11546 Public exploit Scanner template EPSS 33%

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailin…

Jul 14, 2020
High 7.5

CVE-2020-13935 Public exploit EPSS 87%

Infinite Loop in Apache Tomcat

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payl…

org.apache.tomcat:tomcat tomcat9 tomcat8 tomcat9 Debian Ubuntu Maven

Jul 14, 2020
Critical 9.8

CVE-2020-1948 Public exploit EPSS 16%

Deserialization of Untrusted Data in Apache Dubbo

This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will e…

org.apache.dubbo:dubbo org.apache.dubbo:dubbo-common Maven

Jul 14, 2020
Critical 9.8

CVE-2020-13925 Public exploit EPSS 20%

Command Injection in Kylin

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to exe…

org.apache.kylin:kylin-server-base Maven

Jul 14, 2020
Critical 10.0

CVE-2020-6287 Exploited Public exploit Scanner template EPSS 95%

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication …

SAP SAP NetWeaver AS JAVA (LM Configuration Wizard)

Jul 14, 2020
KEV Nov 3, 2021
Medium 5.3

CVE-2020-6286 Public exploit EPSS 24%

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configurati…

SAP SAP NetWeaver AS JAVA (LM Configuration Wizard)

Jul 14, 2020
Unscored —

CVE-2020-1349 Public exploit EPSS 23%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Microsoft Outlook Microsoft 365 Apps for Enterprise for 64-bit Systems

Jul 14, 2020