Week 14, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2020-7626 karma-mojo enables OS Command Injection
  EPSS 4.3%
• Critical 9.8
  CVE-2020-7630 OS Command Injection in git-add-remote
  EPSS 4.2%
• Critical 9.8
  CVE-2020-7629 OS Command Injection in install-package
  EPSS 4.2%
• Critical 9.8
  CVE-2020-7627 OS Command Injection in node-key-sender
  EPSS 4.2%
• Critical 9.8
  CVE-2020-7625 Injection in op-browser
  EPSS 4.2%
• Critical 9.1
  CVE-2020-11467 An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style/edit-them…
  EPSS 4%
• Critical 9.8
  CVE-2020-7623 OS Command Injection in jscover
  EPSS 3.6%
• Critical 9.8
  CVE-2020-7621 OS Command Injection in strong-nginx-controller
  EPSS 3%
• Critical 9.1
  CVE-2019-17560 Improper Certificate Validation in Apache Netbeans
  EPSS 2.3%
• Critical 9.8
  CVE-2020-7610 Deserialization of Untrusted Data in bson
  EPSS 2.3%
• Critical 9.8
  CVE-2020-7619 Command injection in get-git-data
  EPSS 2.2%
• Critical 9.8
  CVE-2020-7620 OS Command Injection in pomelo-monitor
  EPSS 2.2%
• Critical 9.8
  CVE-2020-7611 Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
  EPSS 1.8%
• Critical 9.8
  CVE-2020-7628 Command Injection in umount
  EPSS 1.8%
• Critical 9.8
  CVE-2016-11023 SQL Injection in odata4j
  EPSS 1.4%

All 17 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2020-10199 Nexus Repository Manager 3 - Remote Code Execution
  EPSS 99%
• Unscored
  CVE-2020-1943 Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

  Apache · Apache OFBiz

  EPSS 97%
• Unscored
  CVE-2020-11455 LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.
  EPSS 97%
• Unscored
  CVE-2020-11456 LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey…
  EPSS 71%
• Unscored
  CVE-2020-8143 An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged…
  EPSS 70%
• High 7.5
  CVE-2020-4241 IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system.…

  IBM · Spectrum Protect Plus

  EPSS 66%
• Unscored
  CVE-2020-11100 In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain l…
  EPSS 62%
• Unscored
  CVE-2020-1927 In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and …

  Apache · Apache HTTP Server

  EPSS 57%