Week 36, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.9
  CVE-2020-3495 Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability

  Cisco · Cisco Jabber

  EPSS 61%
• Critical 9.8
  CVE-2020-5777 Authentication bypass in MAGMI
  EPSS 23%
• Critical 9.9
  CVE-2020-6142 A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclu…
  EPSS 9.2%
• Critical 10.0
  CVE-2020-6144 A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5…
  EPSS 6.2%
• Critical 10.0
  CVE-2020-6143 A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5…
  EPSS 6.2%
• Critical 9.8
  CVE-2020-6141 An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. …
  EPSS 3.9%
• Critical 9.0
  CVE-2020-15150 Remote Code Execution in paginator(hex)

  duffelhq · paginator

  EPSS 3.3%
• Critical 9.8
  CVE-2020-7720 Prototype Pollution
  EPSS 3.2%
• Critical 9.8
  CVE-2020-7730 Command Injection
  EPSS 3.1%
• Critical 9.8
  CVE-2020-7719 Prototype Pollution
  EPSS 2.8%
• Critical 9.8
  CVE-2020-6140 SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opens…
  EPSS 2.6%
• Critical 9.8
  CVE-2020-6139 SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opens…
  EPSS 2.6%
• Critical 9.8
  CVE-2020-6138 SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserI…
  EPSS 2.6%
• Critical 9.8
  CVE-2020-6137 SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opens…
  EPSS 2.6%
• Critical 9.1
  CVE-2020-4693 IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caus…

  IBM · Spectrum Protect Operations Center

  EPSS 2.5%

All 411 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2020-25078 An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for r…
  EPSS 98%
• Unscored
  CVE-2020-24949 Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform…
  EPSS 67%
• High 8.8
  CVE-2020-25079 An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injecti…
  EPSS 54%
• High 7.5
  CVE-2019-5645 Rapid7 Metasploit HTTP Handler Denial of Service

  Rapid7 · Metasploit Framework

  EPSS 49%
• Unscored
  CVE-2020-14008 Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to re…
  EPSS 40%
• High 8.8
  CVE-2020-14209 Dolibarr Unrestricted Upload of File with Dangerous Type
  EPSS 27%
• Unscored
  CVE-2020-11579 An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticate…
  EPSS 27%
• High 8.8
  CVE-2020-24363 TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset…
  EPSS 22%