2020 CVEs (page 116)
Page 116 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0256 | Medium | 6.8 | 2020-08-11 | In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when i… |
CVE-2020-0254 | High | 7.5 | 2020-08-11 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751 |
CVE-2020-0253 | Critical | 9.8 | 2020-08-11 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365 |
CVE-2020-0252 | Critical | 9.8 | 2020-08-11 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803 |
CVE-2020-0251 | High | 7.5 | 2020-08-11 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626 |
CVE-2020-0250 | Medium | 5.5 | 2020-08-11 | In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of locatio… |
CVE-2020-0249 | Medium | 5.5 | 2020-08-11 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information dis… |
CVE-2020-0248 | Medium | 5.5 | 2020-08-11 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information dis… |
CVE-2020-0247 | Medium | 5.5 | 2020-08-11 | In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service… |
CVE-2020-0243 | High | 7.8 | 2020-08-11 | In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in th… |
CVE-2020-0242 | High | 7.8 | 2020-08-11 | In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media serve… |
CVE-2020-0241 | High | 7.8 | 2020-08-11 | In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privi… |
CVE-2020-0240 | High | 8.8 | 2020-08-11 | In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addi… |
CVE-2020-0239 | Medium | 5.5 | 2020-08-11 | In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead… |
CVE-2020-0238 | High | 7.0 | 2020-08-11 | In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local escalat… |
CVE-2020-0108 | High | 7.8 | 2020-08-11 | In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local… |
CVE-2020-9404 | High | 7.1 | 2020-08-11 | In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the cur… |
CVE-2020-9403 | Medium | 5.5 | 2020-08-11 | In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved by any user with access to the PACTware… |
CVE-2020-9244 | Medium | 6.8 | 2020-08-11 | HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier… |
CVE-2020-8918 | Medium | 6.3 | 2020-08-11 | An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the au… |
CVE-2020-13179 | Medium | 5.5 | 2020-08-11 | Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, whic… |
CVE-2020-11976 | High | 7.5 | 2020-08-11 | By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information… |
CVE-2020-15071 | Medium | 6.1 | 2020-08-11 | content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. |
CVE-2020-14979 | High | 7.8 | 2020-08-11 | The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write t… |
CVE-2020-13178 | Medium | 6.7 | 2020-08-11 | A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of… |
CVE-2020-13177 | High | 7.8 | 2020-08-11 | The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded p… |
CVE-2020-13176 | Medium | 6.1 | 2020-08-11 | The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the… |
CVE-2020-13175 | High | 7.5 | 2020-08-11 | The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Clo… |
CVE-2020-13174 | Medium | 6.1 | 2020-08-11 | The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacke… |
CVE-2020-17466 | Critical | 9.8 | 2020-08-11 | Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses. |
CVE-2020-17448 | High | 7.8 | 2020-08-11 | Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat… |
CVE-2020-17368 | Critical | 9.8 | 2020-08-11 | Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection. |
CVE-2020-17367 | High | 7.8 | 2020-08-11 | Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection. |
CVE-2020-16092 | Low | 3.8 | 2020-08-11 | In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious… |
CVE-2020-15597 | Medium | 5.4 | 2020-08-11 | SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field. |
CVE-2020-13124 | High | 8.8 | 2020-08-11 | SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary… |
CVE-2020-11552 | Critical | 9.8 | 2020-08-11 | An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associ… |
CVE-2020-14324 | Critical | 9.1 | 2020-08-11 | A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be… |
CVE-2020-14313 | Medium | 4.3 | 2020-08-11 | An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a re… |
CVE-2020-14296 | High | 7.1 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan a… |
CVE-2020-10780 | Medium | 6.3 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once… |
CVE-2020-14325 | Critical | 9.1 | 2020-08-11 | Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-exist… |
CVE-2020-10783 | High | 8.3 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to… |
CVE-2020-10779 | Medium | 6.5 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. There… |
CVE-2020-10778 | Medium | 6.0 | 2020-08-11 | In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is… |
CVE-2020-10777 | Medium | 5.4 | 2020-08-11 | A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on… |
CVE-2020-4486 | High | 8.1 | 2020-08-11 | IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Forc… |
CVE-2020-4485 | Medium | 6.5 | 2020-08-11 | IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms… |
CVE-2020-9079 | High | 8.8 | 2020-08-11 | FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a… |
CVE-2020-16278 | Medium | 6.1 | 2020-08-10 | A cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the c… |
CVE-2020-16277 | High | 8.8 | 2020-08-10 | An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthoriz… |
CVE-2020-16276 | High | 8.8 | 2020-08-10 | An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized… |
CVE-2020-16275 | Medium | 6.1 | 2020-08-10 | A cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run i… |
CVE-2020-15139 | High | 8.8 | 2020-08-10 | In MyBB before version 1.8.24, the custom MyCode (BBCode) for the visual editor doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS… |
CVE-2020-9245 | Medium | 5.5 | 2020-08-10 | HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8) have a denial of servi… |
CVE-2020-9243 | Medium | 5.5 | 2020-08-10 | HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recur… |
CVE-2020-9078 | High | 7.8 | 2020-08-10 | FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to exploit this vulnerabil… |
CVE-2020-17480 | Medium | 6.1 | 2020-08-10 | TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert… |
CVE-2020-17479 | Critical | 9.8 | 2020-08-10 | jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array. |
CVE-2020-17478 | High | 7.5 | 2020-08-10 | ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm. |
CVE-2020-15662 | Medium | 6.5 | 2020-08-10 | A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. Th… |
CVE-2020-15661 | Medium | 6.5 | 2020-08-10 | A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. T… |
CVE-2020-15659 | High | 8.8 | 2020-08-10 | Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory c… |
CVE-2020-15658 | Medium | 6.5 | 2020-08-10 | The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier p… |
CVE-2020-15657 | High | 7.8 | 2020-08-10 | Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files i… |
CVE-2020-15656 | High | 8.8 | 2020-08-10 | JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the co… |
CVE-2020-15655 | Medium | 6.5 | 2020-08-10 | A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-ori… |
CVE-2020-15654 | Medium | 6.5 | 2020-08-10 | When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are… |
CVE-2020-15653 | Medium | 6.5 | 2020-08-10 | An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying o… |
CVE-2020-15652 | Medium | 6.5 | 2020-08-10 | By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content… |
CVE-2020-15651 | Medium | 4.3 | 2020-08-10 | A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This… |
CVE-2020-15650 | Medium | 5.5 | 2020-08-10 | Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the pre… |
CVE-2020-15649 | Medium | 5.5 | 2020-08-10 | Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files… |
CVE-2020-15648 | Medium | 6.5 | 2020-08-10 | Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affec… |
CVE-2020-15647 | High | 7.4 | 2020-08-10 | A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, i… |
CVE-2020-17476 | Medium | 6.1 | 2020-08-10 | Mibew Messenger before 3.2.7 allows XSS via a crafted user name. |
CVE-2020-9529 | Critical | 9.8 | 2020-08-10 | Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers… |
CVE-2020-9528 | High | 7.5 | 2020-08-10 | Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers… |
CVE-2020-9527 | Critical | 9.8 | 2020-08-10 | Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20, after 2018-08-09 through 2020), as used by many different vendors in millions of Inter… |
CVE-2020-9526 | Medium | 5.9 | 2020-08-10 | CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to sup… |
CVE-2020-9525 | High | 8.1 | 2020-08-10 | CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an authentication flaw that allows remote attackers to perform a m… |
CVE-2020-8229 | Medium | 5.5 | 2020-08-10 | A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system. |
CVE-2020-8224 | High | 7.8 | 2020-08-10 | A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory. |
CVE-2020-6145 | High | 8.8 | 2020-08-10 | An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially crafted HTTP request can cause an SQL inj… |
CVE-2020-6070 | High | 7.8 | 2020-08-10 | An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a log… |
CVE-2020-13295 | Medium | 5.4 | 2020-08-10 | For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. |
CVE-2020-13294 | Medium | 4.2 | 2020-08-10 | In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application. |
CVE-2020-13293 | Medium | 6.3 | 2020-08-10 | In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash. |
CVE-2020-13292 | Critical | 9.6 | 2020-08-10 | In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Flow. |
CVE-2020-4541 | Medium | 6.1 | 2020-08-10 | IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… |
CVE-2020-4539 | Medium | 6.1 | 2020-08-10 | IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java… |
CVE-2020-4533 | Medium | 6.1 | 2020-08-10 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… |
CVE-2020-12781 | Medium | 5.7 | 2020-08-10 | Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery. |
CVE-2020-12780 | High | 7.5 | 2020-08-10 | A security misconfiguration exists in Combodo iTop, which can expose sensitive information. |
CVE-2020-12779 | Medium | 6.8 | 2020-08-10 | Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script. |
CVE-2020-12778 | High | 7.4 | 2020-08-10 | Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack. |
CVE-2020-12777 | High | 7.5 | 2020-08-10 | A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system informat… |
CVE-2020-17452 | High | 7.2 | 2020-08-09 | flatCore before 1.5.7 allows upload and execution of a .php file by an admin. |
CVE-2020-17451 | Medium | 4.8 | 2020-08-09 | flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent par… |
CVE-2020-16248 | Medium | 5.8 | 2020-08-09 | Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both in… |