Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2020

81 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-13448
    40Plan

    QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server

    HighCVSS 8.8Proof of conceptEPSS 17%

    quickbox · quickboxJun 1, 2020

  • CVE-2020-10136
    30Monitor

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    MediumCVSS 5.3Proof of conceptEPSS 28%

    cisco · nx-osJun 2, 2020

  • CVE-2020-5410
    89Now

    Directory Traversal with spring-cloud-config-server

    HighCVSS 7.5KEVWeaponizedEPSS 95%

    vmware · spring cloud configJun 2, 2020

  • CVE-2020-7115
    58Plan

    The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.

    CriticalCVSS 9.8Proof of conceptEPSS 64%

    arubanetworks · clearpass policy managerJun 3, 2020

  • CVE-2020-13756
    54Plan

    Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelecto

    CriticalCVSS 9.8Proof of conceptEPSS 49%

    sabberworm · php css parserJun 3, 2020

  • CVE-2020-13782
    43Plan

    D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection.

    HighCVSS 8.8No exploitEPSS 27%

    dlink · dir-865l firmwareJun 3, 2020

  • CVE-2020-7012
    40Plan

    Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant.

    HighCVSS 8.8WeaponizedEPSS 18%

    elastic · kibanaJun 3, 2020

  • CVE-2020-13379
    62This week

    The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.

    HighCVSS 8.2Proof of conceptEPSS 99%

    grafana · grafanaJun 3, 2020

  • CVE-2020-10546
    65This week

    rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection.

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    rconfig · rconfigJun 4, 2020

  • CVE-2020-10547
    50Plan

    rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection.

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    rconfig · rconfigJun 4, 2020

  • CVE-2020-10548
    50Plan

    rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection.

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    rconfig · rconfigJun 4, 2020

  • CVE-2020-10549
    49Plan

    rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection.

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    rconfig · rconfigJun 4, 2020

  • CVE-2020-13777
    36Monitor

    GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authent

    HighCVSS 7.4Proof of conceptEPSS 22%

    gnu · gnutlsJun 4, 2020

  • CVE-2020-13818
    41Plan

    In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.

    HighCVSS 7.5No exploitEPSS 37%

    zohocorp · manageengine opmanagerJun 4, 2020

  • CVE-2020-11975
    48Plan

    Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execut

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    apache · unomiJun 5, 2020

  • CVE-2020-9859
    61This week

    A memory consumption issue was addressed with improved memory handling.

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    apple · ipadosJun 5, 2020

  • CVE-2020-4448
    43Plan

    IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the sy

    CriticalCVSS 9.8No exploitEPSS 12%

    ibm · websphere application serverJun 5, 2020

  • CVE-2020-4450
    49Plan

    IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specia

    CriticalCVSS 9.8No exploitEPSS 34%

    ibm · websphere application serverJun 5, 2020

  • CVE-2020-10543
    35Monitor

    Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer ove

    HighCVSS 8.2No exploitEPSS 11%

    perl · perlJun 5, 2020

  • CVE-2020-12695
    35Monitor

    The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delive

    HighCVSS 7.5Proof of conceptEPSS 15%

    nec · wr8165nJun 8, 2020

  • CVE-2020-12800
    63This week

    The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code ex

    CriticalCVSS 9.8WeaponizedEPSS 78%

    codedropz · drag and drop multiple file upload - contact form 7Jun 8, 2020

  • CVE-2020-13432
    39Monitor

    rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-p

    HighCVSS 7.5No exploitEPSS 30%

    rejetto · http file serverJun 8, 2020

  • CVE-2020-13965
    77This week

    An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5.

    MediumCVSS 6.1KEVWeaponizedEPSS 76%

    roundcube · webmailJun 8, 2020

  • CVE-2020-13160
    63This week

    AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.

    CriticalCVSS 9.8WeaponizedEPSS 80%

    anydesk · anydeskJun 9, 2020

  • CVE-2020-9801
    40Plan

    A logic issue was addressed with improved restrictions.

    MediumCVSS 5.3WeaponizedEPSS 1%

    apple · safariJun 9, 2020

  • CVE-2020-9818
    66This week

    An out-of-bounds write issue was addressed with improved bounds checking.

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    apple · ipadosJun 9, 2020

  • CVE-2020-9819
    60This week

    A memory consumption issue was addressed with improved memory handling.

    MediumCVSS 4.3KEVWeaponizedEPSS 2%

    apple · ipadosJun 9, 2020

  • CVE-2020-9839
    40Plan

    A race condition was addressed with improved state handling.

    HighCVSS 7.0WeaponizedEPSS 3%

    apple · ipadosJun 9, 2020

  • CVE-2020-9850
    62This week

    A logic issue was addressed with improved restrictions.

    CriticalCVSS 9.8WeaponizedEPSS 77%

    apple · icloudJun 9, 2020

  • CVE-2020-9856
    40Plan

    This issue was addressed with improved checks.

    MediumCVSS 5.3WeaponizedEPSS 1%

    apple · mac os xJun 9, 2020

  • CVE-2020-10644
    60This week

    The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8

    HighCVSS 7.5WeaponizedEPSS 20%

    inductiveautomation · ignition gatewayJun 9, 2020

  • CVE-2020-12004
    60This week

    The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignit

    HighCVSS 7.5WeaponizedEPSS 13%

    inductiveautomation · ignition gatewayJun 9, 2020

  • CVE-2020-0986
    66This week

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva

    HighCVSS 7.8KEVWeaponizedEPSS 16%

    microsoft · windows 10 1507Jun 9, 2020

  • CVE-2020-1181
    56Plan

    A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web

    HighCVSS 8.8No exploitEPSS 69%

    microsoft · sharepoint enterprise serverJun 9, 2020

  • CVE-2020-1206
    33Monitor

    An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain req

    HighCVSS 7.5Proof of conceptEPSS 10%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1208
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 14%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1219
    36Monitor

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet explorerJun 9, 2020

  • CVE-2020-1225
    40Plan

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    HighCVSS 8.8No exploitEPSS 17%

    microsoft · 365 appsJun 9, 2020

  • CVE-2020-1226
    40Plan

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    HighCVSS 8.8No exploitEPSS 17%

    microsoft · 365 appsJun 9, 2020

  • CVE-2020-1236
    34Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1248
    39Monitor

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    HighCVSS 8.8No exploitEPSS 13%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1281
    39Monitor

    A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code

    HighCVSS 8.8No exploitEPSS 14%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1286
    39Monitor

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully explo

    HighCVSS 8.8No exploitEPSS 11%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1299
    39Monitor

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    HighCVSS 8.8No exploitEPSS 14%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1300
    53Plan

    A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an

    HighCVSS 8.8No exploitEPSS 59%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1301
    48Plan

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests,

    HighCVSS 8.8Proof of conceptEPSS 43%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1313
    43Plan

    An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows

    HighCVSS 7.8WeaponizedEPSS 38%

    microsoft · windows 10Jun 9, 2020

  • CVE-2020-1321
    38Monitor

    A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft

    HighCVSS 8.8No exploitEPSS 11%

    microsoft · 365 appsJun 9, 2020

  • CVE-2020-11798
    36Monitor

    A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an

    MediumCVSS 5.3Proof of conceptEPSS 48%

    mitel · micollab audio\, web \& video conferencingJun 10, 2020

  • CVE-2020-13851
    62This week

    Artica Pandora FMS 7.44 allows remote command execution via the events feature.

    HighCVSS 8.8WeaponizedEPSS 90%

    pandorafms · pandora fmsJun 10, 2020

  • CVE-2020-13852
    36Monitor

    Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.

    HighCVSS 7.2No exploitEPSS 27%

    pandorafms · pandora fmsJun 10, 2020

  • CVE-2020-13855
    36Monitor

    Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature.

    HighCVSS 7.2No exploitEPSS 27%

    pandorafms · pandora fmsJun 10, 2020

  • CVE-2020-4469
    43Plan

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system.

    CriticalCVSS 9.8No exploitEPSS 13%

    ibm · spectrum protect plusJun 15, 2020

  • CVE-2020-14011
    48Plan

    Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in

    CriticalCVSS 9.8Proof of conceptEPSS 29%

    lansweeper · lansweeperJun 15, 2020

  • CVE-2020-12001
    42Plan

    FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, Cont

    CriticalCVSS 9.8No exploitEPSS 11%

    rockwellautomation · factorytalk linxJun 15, 2020

  • CVE-2020-11896
    51Plan

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

    CriticalCVSS 10.0Proof of conceptEPSS 36%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11898
    42Plan

    The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers

    CriticalCVSS 9.1Proof of conceptEPSS 18%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11899
    57Plan

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    MediumCVSS 5.4KEVWeaponizedEPSS 18%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11900
    36Monitor

    The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

    HighCVSS 8.2No exploitEPSS 13%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11901
    42Plan

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

    CriticalCVSS 9.0No exploitEPSS 21%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-11910
    24Monitor

    The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

    MediumCVSS 5.3No exploitEPSS 10%

    treck · tcp\/ipJun 17, 2020

  • CVE-2020-14295
    54Plan

    A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter.

    HighCVSS 7.2WeaponizedEPSS 85%

    cacti · cactiJun 17, 2020

  • CVE-2020-13640
    43Plan

    A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL comma

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    gvectors · wpdiscuzJun 18, 2020

  • CVE-2020-14422
    27Monitor

    Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a

    MediumCVSS 5.9No exploitEPSS 12%

    python · pythonJun 18, 2020

  • CVE-2020-8165
    53Plan

    A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user

    CriticalCVSS 9.8Proof of conceptEPSS 45%

    rubyonrails · railsJun 19, 2020

  • CVE-2020-13158
    46Plan

    Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.

    HighCVSS 7.5Proof of conceptEPSS 53%

    articatech · artica proxyJun 22, 2020

  • CVE-2020-11989
    46Plan

    Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    apache · shiroJun 22, 2020

  • CVE-2020-14945
    38Monitor

    A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privi

    HighCVSS 8.8Proof of conceptEPSS 11%

    globalradar · bsa radarJun 22, 2020

  • CVE-2020-12033
    35Monitor

    In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied id

    HighCVSS 8.8No exploitEPSS 1%

    rockwellautomation · factorytalk services platformJun 23, 2020

  • CVE-2020-9480
    48Plan

    In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) v

    CriticalCVSS 9.8Proof of conceptEPSS 29%

    apache · sparkJun 23, 2020

  • CVE-2020-14005
    39Monitor

    Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code

    HighCVSS 8.8No exploitEPSS 14%

    solarwinds · orion network performance monitorJun 24, 2020

  • CVE-2020-13700
    34Monitor

    An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress.

    HighCVSS 7.5Proof of conceptEPSS 13%

    acf to rest api project · acf to rest apiJun 24, 2020

  • CVE-2020-9597
    38Monitor

    Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and

    HighCVSS 8.8No exploitEPSS 10%

    adobe · acrobat dcJun 25, 2020

  • CVE-2020-9590
    43Plan

    Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability.

    HighCVSS 7.8No exploitEPSS 40%

    adobe · digital negative software development kitJun 26, 2020

  • CVE-2020-11996
    38Monitor

    A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could t

    HighCVSS 7.5Proof of conceptEPSS 26%

    apache · tomcatJun 26, 2020

  • CVE-2020-2021
    71This week

    PAN-OS: Authentication Bypass in SAML Authentication

    CriticalCVSS 10.0KEVWeaponizedEPSS 4%

    paloaltonetworks · pan-osJun 29, 2020

  • CVE-2020-13896
    25Monitor

    The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVer

    MediumCVSS 5.3No exploitEPSS 14%

    maipu · mp1800x-50 firmwareJun 29, 2020

  • CVE-2020-15069
    72This week

    Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientles

    CriticalCVSS 9.8KEVWeaponizedEPSS 10%

    sophos · xg firewall firmwareJun 29, 2020

  • CVE-2020-15415
    94Now

    On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution v

    CriticalCVSS 9.8KEVWeaponizedEPSS 84%

    draytek · vigor3900 firmwareJun 30, 2020

  • CVE-2020-9483
    40Plan

    **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vuln

    HighCVSS 7.5Proof of conceptEPSS 34%

    apache · skywalkingJun 30, 2020

  • CVE-2020-14947
    41Plan

    OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plu

    HighCVSS 8.8Proof of conceptEPSS 19%

    factorfx · open computer software inventory next generationJun 30, 2020