2020 CVEs (page 105)
Page 105 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-3621 | Medium | 5.5 | 2020-09-08 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption a… |
CVE-2020-3620 | Medium | 5.5 | 2020-09-08 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and pote… |
CVE-2020-3619 | High | 7.0 | 2020-09-08 | u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto… |
CVE-2020-3611 | High | 7.8 | 2020-09-08 | u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2020-11158 | High | 7.5 | 2020-09-08 | u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior t… |
CVE-2020-11133 | High | 7.8 | 2020-09-08 | u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria… |
CVE-2020-11128 | High | 7.8 | 2020-09-08 | u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2020-11122 | Medium | 5.5 | 2020-09-08 | u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer… |
CVE-2020-11120 | High | 7.8 | 2020-09-08 | u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid… |
CVE-2020-11118 | High | 7.5 | 2020-09-08 | u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2020-11117 | Critical | 9.8 | 2020-09-08 | u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code… |
CVE-2020-11116 | Critical | 9.8 | 2020-09-08 | u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Comput… |
CVE-2020-11115 | High | 7.5 | 2020-09-08 | u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Co… |
CVE-2020-15709 | Medium | 5.5 | 2020-09-05 | Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to… |
CVE-2020-24987 | Critical | 9.8 | 2020-09-04 | Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handlin… |
CVE-2020-24986 | High | 7.2 | 2020-09-04 | Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site… |
CVE-2020-24981 | Medium | 5.3 | 2020-09-04 | An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly acces… |
CVE-2020-24963 | Medium | 5.4 | 2020-09-04 | An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4. |
CVE-2020-24659 | High | 7.5 | 2020-09-04 | An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with u… |
CVE-2020-14008 | High | 7.2 | 2020-09-04 | Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to re… |
CVE-2020-7299 | Medium | 5.0 | 2020-09-04 | Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user l… |
CVE-2020-4702 | Medium | 5.4 | 2020-09-04 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2020-4632 | Medium | 6.5 | 2020-09-04 | IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacke… |
CVE-2020-4545 | High | 7.8 | 2020-09-04 | IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the imp… |
CVE-2020-7119 | Medium | 4.9 | 2020-09-04 | A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authentica… |
CVE-2020-7730 | Critical | 9.8 | 2020-09-04 | The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param. |
CVE-2020-25023 | Critical | 9.8 | 2020-09-04 | An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access. |
CVE-2020-25022 | Critical | 9.8 | 2020-09-04 | An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access. |
CVE-2020-25021 | Critical | 9.8 | 2020-09-04 | An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access. |
CVE-2020-23834 | High | 8.8 | 2020-09-04 | Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing t… |
CVE-2020-12248 | High | 8.8 | 2020-09-04 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty… |
CVE-2020-12247 | High | 7.1 | 2020-09-04 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text… |
CVE-2020-11493 | High | 8.1 | 2020-09-04 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of… |
CVE-2020-3547 | Medium | 4.3 | 2020-09-04 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management App… |
CVE-2020-3546 | Medium | 5.3 | 2020-09-04 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote… |
CVE-2020-3545 | Medium | 6.0 | 2020-09-04 | A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The v… |
CVE-2020-3542 | Medium | 5.3 | 2020-09-04 | A vulnerability in Cisco Webex Training could allow an authenticated, remote attacker to join a password-protected meeting without providing the meeting passwo… |
CVE-2020-3541 | Medium | 4.4 | 2020-09-04 | A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams f… |
CVE-2020-3537 | Medium | 5.7 | 2020-09-04 | A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability i… |
CVE-2020-3530 | High | 8.4 | 2020-09-04 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that comma… |
CVE-2020-3498 | Medium | 6.5 | 2020-09-04 | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to imp… |
CVE-2020-3495 | Critical | 9.9 | 2020-09-04 | A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper valid… |
CVE-2020-3478 | High | 8.1 | 2020-09-04 | A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain file… |
CVE-2020-3473 | High | 7.8 | 2020-09-04 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate priv… |
CVE-2020-3453 | Medium | 4.7 | 2020-09-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with… |
CVE-2020-3451 | Medium | 4.7 | 2020-09-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with… |
CVE-2020-3430 | High | 8.8 | 2020-09-04 | A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2020-3365 | Medium | 4.3 | 2020-09-04 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a… |
CVE-2020-1911 | Critical | 9.8 | 2020-09-04 | A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe528… |
CVE-2020-24941 | High | 7.5 | 2020-09-04 | An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON co… |
CVE-2020-24940 | High | 7.5 | 2020-09-04 | An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names a… |
CVE-2020-24978 | Critical | 9.8 | 2020-09-04 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7. |
CVE-2020-24977 | Medium | 6.5 | 2020-09-04 | GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commi… |
CVE-2020-24999 | High | 7.8 | 2020-09-03 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml… |
CVE-2020-24996 | High | 7.8 | 2020-09-03 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a… |
CVE-2020-25006 | Critical | 9.8 | 2020-09-03 | Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code. |
CVE-2020-25005 | Critical | 9.8 | 2020-09-03 | Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code. |
CVE-2020-25004 | Critical | 9.8 | 2020-09-03 | Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code. |
CVE-2020-1894 | High | 8.8 | 2020-09-03 | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and W… |
CVE-2020-1891 | Critical | 9.8 | 2020-09-03 | A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone p… |
CVE-2020-1890 | High | 7.5 | 2020-09-03 | A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticke… |
CVE-2020-1889 | Critical | 10.0 | 2020-09-03 | A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege i… |
CVE-2020-1886 | High | 8.8 | 2020-09-03 | A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a… |
CVE-2020-9235 | Medium | 5.5 | 2020-09-03 | Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E… |
CVE-2020-9083 | Low | 2.4 | 2020-09-03 | HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amo… |
CVE-2020-9199 | Medium | 6.8 | 2020-09-03 | B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulner… |
CVE-2020-25125 | High | 7.8 | 2020-09-03 | GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker'… |
CVE-2020-25124 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI. |
CVE-2020-25123 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager. |
CVE-2020-25122 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager. |
CVE-2020-25121 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options. |
CVE-2020-25120 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI. |
CVE-2020-25119 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual. |
CVE-2020-25118 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager. |
CVE-2020-25117 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager. |
CVE-2020-25116 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager. |
CVE-2020-25115 | Medium | 4.8 | 2020-09-03 | The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager. |
CVE-2020-24193 | Critical | 9.8 | 2020-09-03 | A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injec… |
CVE-2020-14373 | Medium | 5.5 | 2020-09-03 | A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a de… |
CVE-2020-11579 | High | 7.5 | 2020-09-03 | An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticate… |
CVE-2020-10720 | Medium | 5.5 | 2020-09-03 | A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system. |
CVE-2020-25102 | Medium | 6.1 | 2020-09-03 | silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possi… |
CVE-2020-24876 | Critical | 9.8 | 2020-09-03 | Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation. |
CVE-2020-24162 | High | 7.8 | 2020-09-03 | The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerability to execu… |
CVE-2020-24161 | High | 7.8 | 2020-09-03 | Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code. |
CVE-2020-24160 | High | 7.8 | 2020-09-03 | Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. |
CVE-2020-24159 | High | 7.8 | 2020-09-03 | NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase You… |
CVE-2020-24158 | High | 7.8 | 2020-09-03 | 360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned… |
CVE-2020-23814 | Medium | 6.1 | 2020-09-03 | Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)Addr… |
CVE-2020-23811 | High | 7.5 | 2020-09-03 | xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java. |
CVE-2020-25105 | Critical | 9.8 | 2020-09-03 | eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities). |
CVE-2020-25104 | Medium | 5.4 | 2020-09-03 | eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS pa… |
CVE-2020-25068 | High | 7.5 | 2020-09-03 | Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal f… |
CVE-2020-25042 | High | 7.2 | 2020-09-03 | An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a… |
CVE-2020-24948 | High | 7.2 | 2020-09-03 | The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege use… |
CVE-2020-24863 | Medium | 5.5 | 2020-09-03 | A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 1… |
CVE-2020-24385 | Medium | 5.5 | 2020-09-03 | In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows att… |
CVE-2020-13972 | Medium | 6.1 | 2020-09-03 | Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displ… |
CVE-2020-7382 | Medium | 6.8 | 2020-09-03 | Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file… |
CVE-2020-7381 | Medium | 5.8 | 2020-09-03 | In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker… |