2020 CVEs (page 112)
Page 112 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9693 | High | 7.8 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds… |
CVE-2020-9701 | High | 7.8 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vu… |
CVE-2020-9700 | High | 7.8 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vu… |
CVE-2020-9699 | High | 7.8 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vu… |
CVE-2020-9698 | High | 7.8 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vu… |
CVE-2020-4653 | Medium | 6.1 | 2020-08-19 | IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a speciall… |
CVE-2020-4648 | Medium | 6.5 | 2020-08-19 | A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to… |
CVE-2020-4381 | Medium | 6.5 | 2020-08-19 | IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during deployment or upgra… |
CVE-2020-24394 | High | 7.1 | 2020-08-19 | In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL suppo… |
CVE-2020-24381 | High | 7.5 | 2020-08-19 | GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that th… |
CVE-2020-5385 | Medium | 6.7 | 2020-08-18 | Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomp… |
CVE-2020-24032 | Critical | 9.8 | 2020-08-18 | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. |
CVE-2020-23934 | High | 8.8 | 2020-08-18 | An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section. |
CVE-2020-15926 | Medium | 6.1 | 2020-08-18 | Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the client which results in… |
CVE-2020-15865 | Critical | 9.8 | 2020-08-18 | A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML… |
CVE-2020-9415 | Medium | 5.3 | 2020-08-18 | The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a… |
CVE-2020-7019 | Medium | 6.5 | 2020-08-18 | In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same q… |
CVE-2020-7018 | High | 8.8 | 2020-08-18 | Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will b… |
CVE-2020-14936 | Critical | 9.8 | 2020-08-18 | Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocated target… |
CVE-2020-14935 | Critical | 9.8 | 2020-08-18 | Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP… |
CVE-2020-14934 | Critical | 9.8 | 2020-08-18 | Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the input mes… |
CVE-2020-14937 | Critical | 9.1 | 2020-08-18 | Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/outpu… |
CVE-2020-7708 | Critical | 9.8 | 2020-08-18 | The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal fun… |
CVE-2020-7707 | Critical | 9.8 | 2020-08-18 | The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. |
CVE-2020-14333 | Medium | 6.3 | 2020-08-18 | A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a refl… |
CVE-2020-7706 | Critical | 9.8 | 2020-08-18 | The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie. |
CVE-2020-15152 | Critical | 9.1 | 2020-08-17 | ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3… |
CVE-2020-13933 | High | 7.5 | 2020-08-17 | Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass. |
CVE-2020-13183 | Medium | 6.1 | 2020-08-17 | Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user i… |
CVE-2020-12480 | Medium | 6.5 | 2020-08-17 | In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be… |
CVE-2020-1597 | High | 7.5 | 2020-08-17 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cau… |
CVE-2020-1591 | Medium | 5.4 | 2020-08-17 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected… |
CVE-2020-1587 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability… |
CVE-2020-1585 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1584 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerabi… |
CVE-2020-1583 | High | 8.8 | 2020-08-17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability… |
CVE-2020-1582 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who success… |
CVE-2020-1581 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who success… |
CVE-2020-1580 | Medium | 5.4 | 2020-08-17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2020-1579 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an a… |
CVE-2020-1578 | Medium | 4.7 | 2020-08-17 | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address S… |
CVE-2020-1577 | High | 7.8 | 2020-08-17 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vul… |
CVE-2020-1574 | Medium | 5.5 | 2020-08-17 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1573 | Medium | 5.5 | 2020-08-17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2020-1571 | High | 7.3 | 2020-08-17 | An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code wi… |
CVE-2020-1570 | High | 7.5 | 2020-08-17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corru… |
CVE-2020-1569 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
CVE-2020-1568 | High | 7.5 | 2020-08-17 | A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in suc… |
CVE-2020-1567 | Medium | 4.2 | 2020-08-17 | A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the cont… |
CVE-2020-1566 | Medium | 4.2 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this… |
CVE-2020-1565 | High | 7.5 | 2020-08-17 | An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions. To exploit this vulnerability… |
CVE-2020-1564 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1563 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who success… |
CVE-2020-1562 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the… |
CVE-2020-1561 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the… |
CVE-2020-1560 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1558 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1557 | High | 7.3 | 2020-08-17 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-1556 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the… |
CVE-2020-1555 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability c… |
CVE-2020-1554 | High | 7.8 | 2020-08-17 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnera… |
CVE-2020-1553 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulne… |
CVE-2020-1552 | High | 8.0 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited… |
CVE-2020-1551 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1550 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would… |
CVE-2020-1549 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would… |
CVE-2020-1548 | High | 7.8 | 2020-08-17 | An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory. To exploit this vulnerability, an attacker would f… |
CVE-2020-1547 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1546 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1545 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1544 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1543 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1542 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1541 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1540 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1539 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1538 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would fi… |
CVE-2020-1537 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this v… |
CVE-2020-1536 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1535 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first… |
CVE-2020-1534 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker w… |
CVE-2020-1533 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the… |
CVE-2020-1531 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Accounts Control improperly handles memory. To exploit this vulnerability, an attacker would fi… |
CVE-2020-1530 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory. To exploit this vulnerability, an attacker would first hav… |
CVE-2020-1529 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfu… |
CVE-2020-1528 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Radio Manager API improperly handles memory. To exploit this vulnerability, an attacker would f… |
CVE-2020-1527 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Custom Protocol Engine improperly handles memory. To exploit this vulnerability, an attacker wo… |
CVE-2020-1526 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Network Connection Broker improperly handles memory. To exploit this vulnerability, an attacker… |
CVE-2020-1525 | High | 7.8 | 2020-08-17 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnera… |
CVE-2020-1524 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Speech Shell Components improperly handle memory. To exploit this vulnerability, an attacker wo… |
CVE-2020-1522 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would firs… |
CVE-2020-1521 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would firs… |
CVE-2020-1520 | High | 7.8 | 2020-08-17 | A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory. An attacker who successfully exploited the vulnerabil… |
CVE-2020-1519 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would fi… |
CVE-2020-1518 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory. To exploit this vulnerabilit… |
CVE-2020-1517 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory. To exploit this vulnerabilit… |
CVE-2020-1516 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker woul… |
CVE-2020-1515 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory. To exploit this vulnerability, an attacker would fi… |
CVE-2020-1513 | High | 7.8 | 2020-08-17 | An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory. To exploit this vulnerability, an attacker would first h… |
CVE-2020-1512 | High | 7.8 | 2020-08-17 | An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |