Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2020

86 records · 16 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-13381
    57Plan

    openSIS through 7.4 allows SQL Injection.

    CriticalCVSS 9.8WeaponizedEPSS 59%

    os4ed · opensisJul 1, 2020

  • CVE-2020-13382
    52Plan

    openSIS through 7.4 has Incorrect Access Control.

    CriticalCVSS 9.1WeaponizedEPSS 52%

    os4ed · opensisJul 1, 2020

  • CVE-2020-13383
    50Plan

    openSIS through 7.4 allows Directory Traversal.

    HighCVSS 7.5WeaponizedEPSS 67%

    os4ed · opensisJul 1, 2020

  • CVE-2020-5902
    99Now

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Inte

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    f5 · big-ip access policy managerJul 1, 2020

  • CVE-2020-12497
    35Monitor

    Phoenix Contact Automation Worx <= 1.87: stack-based overflow

    HighCVSS 7.8No exploitEPSS 14%

    phoenixcontact · pc worxJul 1, 2020

  • CVE-2020-15500
    28Monitor

    An issue was discovered in server.js in TileServer GL through 3.0.0.

    MediumCVSS 6.1Proof of conceptEPSS 12%

    tileserver · tileserverglJul 1, 2020

  • CVE-2020-14092
    67This week

    The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.

    CriticalCVSS 9.8Proof of conceptEPSS 94%

    ithemes · paypal proJul 2, 2020

  • CVE-2020-8163
    60This week

    The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument o

    HighCVSS 8.8Proof of conceptEPSS 82%

    rubyonrails · railsJul 2, 2020

  • CVE-2020-15505
    99Now

    A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3,

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    mobileiron · coreJul 6, 2020

  • CVE-2020-9376
    35Monitor

    D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php.

    HighCVSS 7.5Proof of conceptEPSS 16%

    dlink · dir-610 firmwareJul 9, 2020

  • CVE-2020-9377
    71This week

    D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php.

    HighCVSS 8.8KEVWeaponizedEPSS 21%

    dlink · dir-610 firmwareJul 9, 2020

  • CVE-2020-7457
    42Plan

    In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p

    HighCVSS 8.1WeaponizedEPSS 33%

    freebsd · freebsdJul 9, 2020

  • CVE-2019-17638
    40Plan

    In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce

    CriticalCVSS 9.4Proof of conceptEPSS 11%

    eclipse · jettyJul 9, 2020

  • CVE-2020-15299
    38Monitor

    A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick

    MediumCVSS 6.1No exploitEPSS 46%

    king-theme · kingcomposerJul 9, 2020

  • CVE-2020-8191
    31Monitor

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    MediumCVSS 6.1Proof of conceptEPSS 23%

    citrix · application delivery controller firmwareJul 10, 2020

  • CVE-2020-8193
    82Now

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and C

    MediumCVSS 6.5KEVWeaponizedEPSS 88%

    citrix · application delivery controller firmwareJul 10, 2020

  • CVE-2020-8194
    29Monitor

    Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    MediumCVSS 6.5Proof of conceptEPSS 10%

    citrix · application delivery controller firmwareJul 10, 2020

  • CVE-2020-8195
    66This week

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    MediumCVSS 6.5KEVWeaponizedEPSS 33%

    citrix · application delivery controller firmwareJul 10, 2020

  • CVE-2020-8196
    55Plan

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and C

    MediumCVSS 4.3KEVWeaponizedEPSS 26%

    citrix · application delivery controller firmwareJul 10, 2020

  • CVE-2020-11749
    41Plan

    Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views.

    CriticalCVSS 9.0Proof of conceptEPSS 16%

    pandorafms · pandora fmsJul 13, 2020

  • CVE-2020-10987
    93Now

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via t

    CriticalCVSS 9.8KEVWeaponizedEPSS 79%

    tenda · ac15 firmwareJul 13, 2020

  • CVE-2020-15050
    45Plan

    An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.

    HighCVSS 7.5Proof of conceptEPSS 50%

    supremainc · biostar 2Jul 13, 2020

  • CVE-2020-13925
    45Plan

    Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the se

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    apache · kylinJul 14, 2020

  • CVE-2020-6286
    29Monitor

    The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions

    MediumCVSS 5.3Proof of conceptEPSS 28%

    sap · netweaver application server javaJul 14, 2020

  • CVE-2020-6287
    98Now

    SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an

    CriticalCVSS 10.0KEVWeaponizedEPSS 94%

    sap · netweaver application server javaJul 14, 2020

  • CVE-2020-1948
    44Plan

    This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    apache · dubboJul 14, 2020

  • CVE-2020-13934
    49Plan

    An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 proces

    HighCVSS 7.5No exploitEPSS 64%

    apache · tomcatJul 14, 2020

  • CVE-2020-13935
    56Plan

    The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.

    HighCVSS 7.5Proof of conceptEPSS 86%

    apache · tomcatJul 14, 2020

  • CVE-2020-11546
    49Plan

    SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php.

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    superwebmailer · superwebmailerJul 14, 2020

  • CVE-2020-1040
    68This week

    A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica

    CriticalCVSS 9.0KEVWeaponizedEPSS 7%

    microsoft · windows server 2008Jul 14, 2020

  • CVE-2020-1147
    89Now

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the

    HighCVSS 7.8KEVWeaponizedEPSS 93%

    microsoft · .net coreJul 14, 2020

  • CVE-2020-1240
    39Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · 365 appsJul 14, 2020

  • CVE-2020-1349
    38Monitor

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsof

    HighCVSS 7.8Proof of conceptEPSS 22%

    microsoft · 365 appsJul 14, 2020

  • CVE-2020-1350
    99Now

    A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows

    CriticalCVSS 10.0KEVWeaponizedEPSS 96%

    microsoft · windows server 2008Jul 14, 2020

  • CVE-2020-1400
    38Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 23%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1401
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1403
    33Monitor

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · internet explorerJul 14, 2020

  • CVE-2020-1407
    34Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 10%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1409
    35Monitor

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1410
    34Monitor

    A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability,

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1412
    39Monitor

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics

    HighCVSS 8.8No exploitEPSS 13%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1421
    57Plan

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    HighCVSS 8.8No exploitEPSS 74%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1435
    39Monitor

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    HighCVSS 8.8No exploitEPSS 13%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1436
    41Plan

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except

    HighCVSS 8.8No exploitEPSS 21%

    microsoft · windows 10Jul 14, 2020

  • CVE-2020-1439
    41Plan

    A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source

    HighCVSS 8.8No exploitEPSS 20%

    microsoft · sharepoint enterprise serverJul 14, 2020

  • CVE-2020-1446
    38Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 8.8No exploitEPSS 11%

    microsoft · 365 appsJul 14, 2020

  • CVE-2020-1447
    38Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 8.8No exploitEPSS 10%

    microsoft · 365 appsJul 14, 2020

  • CVE-2020-1458
    34Monitor

    A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) file

    HighCVSS 7.8No exploitEPSS 10%

    microsoft · 365 appsJul 14, 2020

  • CVE-2020-1481
    42Plan

    A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a pr

    HighCVSS 8.8No exploitEPSS 23%

    microsoft · eslintJul 14, 2020

  • CVE-2020-9496
    54Plan

    XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

    MediumCVSS 6.1WeaponizedEPSS 98%

    apache · ofbizJul 15, 2020

  • CVE-2020-14644
    97Now

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8KEVWeaponizedEPSS 94%

    oracle · weblogic serverJul 15, 2020

  • CVE-2020-14645
    53Plan

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8Proof of conceptEPSS 46%

    oracle · weblogic serverJul 15, 2020

  • CVE-2020-8958
    42Plan

    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to

    HighCVSS 7.2Proof of conceptEPSS 45%

    gpononu · 1ge router wifi onu v2801rw firmwareJul 15, 2020

  • CVE-2020-3331
    52Plan

    Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 41%

    cisco · rv110w wireless-n vpn firewall firmwareJul 16, 2020

  • CVE-2020-3387
    39Monitor

    Cisco SD-WAN vManage Software Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 13%

    cisco · sd-wan firmwareJul 16, 2020

  • CVE-2020-12011
    48Plan

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executi

    CriticalCVSS 9.8No exploitEPSS 29%

    mitsubishielectric · mc worksJul 16, 2020

  • CVE-2020-13405
    34Monitor

    userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database

    HighCVSS 7.5Proof of conceptEPSS 13%

    microweber · microweberJul 16, 2020

  • CVE-2020-11978
    95Now

    An issue was found in Apache Airflow versions 1.10.10 and below.

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    apache · airflowJul 16, 2020

  • CVE-2020-11981
    50Plan

    An issue was found in Apache Airflow versions 1.10.10 and below.

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    apache · airflowJul 16, 2020

  • CVE-2020-15803
    34Monitor

    Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Wi

    MediumCVSS 6.1No exploitEPSS 32%

    zabbix · zabbixJul 16, 2020

  • CVE-2020-4464
    39Monitor

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with

    HighCVSS 8.8Proof of conceptEPSS 13%

    ibm · websphere application serverJul 17, 2020

  • CVE-2020-12029
    45Plan

    Rockwell Automation FactoryTalk View SE

    HighCVSS 7.8WeaponizedEPSS 46%

    rockwellautomation · factorytalk viewJul 20, 2020

  • CVE-2020-12027
    33Monitor

    Rockwell Automation FactoryTalk View SE

    MediumCVSS 4.3WeaponizedEPSS 53%

    rockwellautomation · factorytalk viewJul 20, 2020

  • CVE-2020-12028
    48Plan

    Rockwell Automation FactoryTalk View SE

    HighCVSS 8.1WeaponizedEPSS 53%

    rockwellautomation · factorytalk viewJul 20, 2020

  • CVE-2020-6507
    41Plan

    Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a cra

    HighCVSS 8.8Proof of conceptEPSS 19%

    google · chromeJul 22, 2020

  • CVE-2020-6519
    29Monitor

    Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML p

    MediumCVSS 6.5Proof of conceptEPSS 10%

    google · chromeJul 22, 2020

  • CVE-2020-15893
    45Plan

    An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

    CriticalCVSS 9.8WeaponizedEPSS 20%

    dlink · dir-816l firmwareJul 22, 2020

  • CVE-2020-3452
    90Now

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    cisco · adaptive security appliance softwareJul 22, 2020

  • CVE-2020-15901
    42Plan

    In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.

    HighCVSS 8.8No exploitEPSS 21%

    nagios · nagios xiJul 22, 2020

  • CVE-2020-15902
    35Monitor

    Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.

    MediumCVSS 6.1No exploitEPSS 35%

    nagios · nagios xiJul 22, 2020

  • CVE-2020-15492
    44Plan

    An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    inneo · startup toolsJul 23, 2020

  • CVE-2020-15920
    68This week

    There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with admini

    CriticalCVSS 9.8WeaponizedEPSS 98%

    midasolutions · eframeworkJul 23, 2020

  • CVE-2020-15921
    44Plan

    Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities,

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    midasolutions · eframeworkJul 23, 2020

  • CVE-2020-15922
    56Plan

    There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative

    CriticalCVSS 9.8Proof of conceptEPSS 57%

    midasolutions · eframeworkJul 23, 2020

  • CVE-2020-15778
    33Monitor

    scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destinat

    HighCVSS 7.4Proof of conceptEPSS 13%

    openbsd · opensshJul 24, 2020

  • CVE-2020-12812
    83Now

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log

    CriticalCVSS 9.8KEVWeaponizedEPSS 45%

    fortinet · fortiosJul 24, 2020

  • CVE-2020-1457
    35Monitor

    A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Wind

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · windows 10Jul 27, 2020

  • CVE-2020-10923
    60This week

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    HighCVSS 8.8WeaponizedEPSS 84%

    netgear · r6700 firmwareJul 28, 2020

  • CVE-2020-10924
    61This week

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    HighCVSS 8.8WeaponizedEPSS 87%

    netgear · r6700 firmwareJul 28, 2020

  • CVE-2020-15419
    48Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.

    HighCVSS 7.5No exploitEPSS 59%

    veeam · one firmwareJul 28, 2020

  • CVE-2020-5377
    50Plan

    Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.

    CriticalCVSS 9.1Proof of conceptEPSS 48%

    dell · emc openmanage server administratorJul 28, 2020

  • CVE-2020-4463
    41Plan

    IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

    HighCVSS 8.2Proof of conceptEPSS 31%

    ibm · maximo asset managementJul 29, 2020

  • CVE-2020-13699
    43Plan

    TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers.

    HighCVSS 8.8WeaponizedEPSS 25%

    teamviewer · teamviewerJul 29, 2020

  • CVE-2020-15588
    43Plan

    An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W.

    CriticalCVSS 9.8No exploitEPSS 12%

    zohocorp · manageengine desktop centralJul 29, 2020

  • CVE-2020-8218
    68This week

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code e

    HighCVSS 7.2KEVWeaponizedEPSS 32%

    ivanti · connect secureJul 30, 2020

  • CVE-2020-16157
    25Monitor

    A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

    MediumCVSS 5.4No exploitEPSS 14%

    nagios · log serverJul 30, 2020