CVEs published in July 2020
4 tracked CVEs from 3 vendors had their first vendor advisory published in July 2020: 1 critical, 1 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2020-12812MediumCISA KEV
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Fortinet · 1 advisory - Added
CVE-2020-13935Unrated
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104
Apache · 1 advisory - Added
CVE-2020-13934Unrated
h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2
Apache · 1 advisory - Added
CVE-2020-2500Critical
Helpdesk: This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service.
QNAP · 1 advisory