July 2020

11 results · Clear filters · Feed

• High 7.2
  CVE-2020-8218 Exploited Public exploit EPSS 32%

  A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perfor…

  Jul 30, 2020

  KEV Mar 7, 2022
• High 7.5
  CVE-2020-3452 Exploited Public exploit EPSS 100%

  Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

  A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

  Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  Jul 22, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2020-11978 Exploited Public exploit EPSS 99%

  Remote code execution (RCE) in Apache Airflow

  An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user runnin…

  Apache Software Foundation Apache Airflow apache-airflow PyPI
  Jul 16, 2020

  KEV Jan 18, 2022
• Critical 9.8
  CVE-2020-14644 Exploited Public exploit EPSS 95%

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle WebLogic Server
  Jul 15, 2020

  KEV Sep 18, 2024
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-6287 Exploited Public exploit EPSS 95%

  SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication …

  SAP_SE SAP NetWeaver AS JAVA (LM Configuration Wizard)
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-10987 Exploited Public exploit EPSS 80%

  The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary …

  Jul 13, 2020

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2020-8193 Exploited Public exploit EPSS 88%

  Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14…

  Jul 10, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-15505 Exploited Public exploit EPSS 100%

  A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1,…

  Jul 7, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-5902 Exploited · Ransomware Public exploit EPSS 100%

  In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic…

  Jul 1, 2020

  KEV Nov 3, 2021