Skip to content
OpenAdvisories

Archive

July 2020

Vulnerabilities first published in this month (UTC), newest first.

← June 2020 2020 / July August 2020 →
  1. 171
  2. 254
  3. 311
  4. 41
  5. 513
  6. 628
  7. 770
  8. 818
  9. 951
  10. 1024
  11. 11 
  12. 12 
  13. 1320
  14. 14194
  15. 15278
  16. 1663
  17. 1773
  18. 18 
  19. 19 
  20. 2036
  21. 2118
  22. 2274
  23. 2341
  24. 2428
  25. 255
  26. 26 
  27. 2725
  28. 2886
  29. 2962
  30. 3051
  31. 3133
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 7.2
    CVE-2020-8218 Exploited Public exploit EPSS 32%

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perfor…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2020-12812 Exploited · Ransomware EPSS 45%

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a u…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-3452 Exploited Public exploit Scanner template EPSS 100%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-11978 Exploited Public exploit Scanner template EPSS 99%

    Remote code execution (RCE) in Apache Airflow

    An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user runnin…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
    KEV Jan 18, 2022
  • Critical 9.8
    CVE-2020-14644 Exploited Public exploit Scanner template EPSS 95%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Sep 18, 2024
  • Critical 10.0
    CVE-2020-1350 Exploited Public exploit EPSS 97%

    A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

    Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-1147 Exploited Public exploit EPSS 96%

    .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

    Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
    KEV Nov 3, 2021
  • Critical 9.0
    CVE-2020-1040 Exploited

    A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inp…

    Microsoft Windows Server Windows
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2020-6287 Exploited Public exploit Scanner template EPSS 95%

    SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication …

    SAP_SE SAP NetWeaver AS JAVA (LM Configuration Wizard)
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-10987 Exploited Public exploit Scanner template EPSS 80%

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary …

    KEV Nov 3, 2021
  • Medium 4.3
    CVE-2020-8196 Exploited EPSS 26%

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14…

    KEV Nov 3, 2021
  • Medium 6.5
    CVE-2020-8195 Exploited EPSS 33%

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.…

    KEV Nov 3, 2021
  • Medium 6.5
    CVE-2020-8193 Exploited Public exploit Scanner template EPSS 88%

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-9377 Exploited EPSS 22%

    D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability on…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2020-15505 Exploited Public exploit Scanner template EPSS 100%

    A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1,…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-5902 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic…

    KEV Nov 3, 2021