2020 CVEs (page 119)
Page 119 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12620 | High | 7.8 | 2020-07-30 | Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection (shell metacharacters after an IP addr… |
CVE-2020-8222 | Medium | 6.8 | 2020-07-30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an a… |
CVE-2020-8221 | Medium | 4.9 | 2020-07-30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web i… |
CVE-2020-8220 | Medium | 6.5 | 2020-07-30 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrato… |
CVE-2020-8219 | High | 7.2 | 2020-07-30 | An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator. |
CVE-2020-8218 | High | 7.2 | 2020-07-30 | A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the ad… |
CVE-2020-8217 | Medium | 5.4 | 2020-07-30 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA. |
CVE-2020-8216 | Medium | 4.3 | 2020-07-30 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the… |
CVE-2020-8213 | Medium | 5.3 | 2020-07-30 | An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the Un… |
CVE-2020-8206 | High | 8.1 | 2020-07-30 | An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TO… |
CVE-2020-8204 | Medium | 6.1 | 2020-07-30 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page. |
CVE-2020-8202 | Medium | 5.3 | 2020-07-30 | Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password. |
CVE-2020-8192 | Medium | 6.5 | 2020-07-30 | A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors opt… |
CVE-2020-4186 | Medium | 5.3 | 2020-07-30 | IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-F… |
CVE-2020-4185 | High | 7.5 | 2020-07-30 | IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informat… |
CVE-2020-14309 | Medium | 6.7 | 2020-07-30 | There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size… |
CVE-2020-10713 | High | 8.2 | 2020-07-30 | A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows… |
CVE-2020-3701 | High | 7.8 | 2020-07-30 | Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM825… |
CVE-2020-3700 | High | 7.5 | 2020-07-30 | Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privil… |
CVE-2020-3699 | Critical | 9.8 | 2020-07-30 | Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon C… |
CVE-2020-3698 | Critical | 9.8 | 2020-07-30 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Com… |
CVE-2020-3688 | Critical | 9.8 | 2020-07-30 | Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2020-3671 | Critical | 9.8 | 2020-07-30 | Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2020-7699 | High | 7.5 | 2020-07-30 | This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or… |
CVE-2020-5610 | High | 7.8 | 2020-07-30 | Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary… |
CVE-2020-16143 | High | 7.8 | 2020-07-29 | The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current working directory. |
CVE-2020-16135 | Medium | 5.9 | 2020-07-29 | libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. |
CVE-2020-14308 | Medium | 6.4 | 2020-07-29 | In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the functi… |
CVE-2020-5763 | High | 8.8 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by… |
CVE-2020-5762 | High | 7.5 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote… |
CVE-2020-5761 | High | 7.5 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated rem… |
CVE-2020-5760 | High | 7.8 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execu… |
CVE-2020-14316 | Critical | 9.9 | 2020-07-29 | A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation al… |
CVE-2020-16118 | High | 7.5 | 2020-07-29 | In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH resp… |
CVE-2020-16117 | Medium | 5.9 | 2020-07-29 | In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minima… |
CVE-2020-15707 | Medium | 5.7 | 2020-07-29 | Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and… |
CVE-2020-15706 | Medium | 6.4 | 2020-07-29 | GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whil… |
CVE-2020-15705 | Medium | 6.4 | 2020-07-29 | GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel sig… |
CVE-2020-15588 | Critical | 9.8 | 2020-07-29 | An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. An attacker-controlled server can trigger an integer overflow in In… |
CVE-2020-15125 | High | 7.7 | 2020-07-29 | In auth0 (npm package) versions before 2.27.1, a DenyList of specific keys that should be sanitized from the request object contained in the error object is us… |
CVE-2020-15099 | High | 8.1 | 2020-07-29 | In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages… |
CVE-2020-15098 | High | 8.8 | 2020-07-29 | In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, it has been discovered that an inte… |
CVE-2020-15086 | Critical | 9.8 | 2020-07-29 | In TYPO3 installations with the "mediace" extension from version 7.6.2 and before version 7.6.5, it has been discovered that an internal verification mechanism… |
CVE-2020-11934 | Medium | 5.9 | 2020-07-29 | It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/us… |
CVE-2020-11933 | High | 7.3 | 2020-07-29 | cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit… |
CVE-2020-13699 | High | 8.8 | 2020-07-29 | TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parame… |
CVE-2020-8553 | Medium | 5.9 | 2020-07-29 | The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to ov… |
CVE-2020-16095 | Medium | 6.1 | 2020-07-29 | The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS. |
CVE-2020-4645 | Medium | 5.4 | 2020-07-29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… |
CVE-2020-4644 | Medium | 5.4 | 2020-07-29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a… |
CVE-2020-4574 | High | 7.5 | 2020-07-29 | IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user ac… |
CVE-2020-4573 | Medium | 5.3 | 2020-07-29 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180. |
CVE-2020-4572 | Medium | 5.3 | 2020-07-29 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returne… |
CVE-2020-4569 | Medium | 6.5 | 2020-07-29 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by… |
CVE-2020-4567 | Critical | 9.8 | 2020-07-29 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials… |
CVE-2020-4463 | High | 8.2 | 2020-07-29 | IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker coul… |
CVE-2020-2078 | Medium | 6.5 | 2020-07-29 | Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized attacker could access… |
CVE-2020-2077 | High | 7.5 | 2020-07-29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker coul… |
CVE-2020-2076 | Critical | 9.8 | 2020-07-29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An at… |
CVE-2020-14488 | High | 8.8 | 2020-07-29 | OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the s… |
CVE-2020-14487 | Critical | 9.4 | 2020-07-29 | OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allo… |
CVE-2020-14486 | Medium | 6.3 | 2020-07-29 | An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow… |
CVE-2020-9692 | Medium | 6.5 | 2020-07-29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrar… |
CVE-2020-9691 | Critical | 9.6 | 2020-07-29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbi… |
CVE-2020-9690 | Medium | 4.2 | 2020-07-29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to sign… |
CVE-2020-9689 | Medium | 6.5 | 2020-07-29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execu… |
CVE-2020-7698 | High | 8.1 | 2020-07-29 | This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized. |
CVE-2020-7697 | Critical | 9.8 | 2020-07-29 | This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCu… |
CVE-2020-14493 | High | 8.8 | 2020-07-29 | A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary c… |
CVE-2020-14492 | Medium | 5.4 | 2020-07-29 | OpenClinic GA 5.09.02 and 5.89.05b does not properly neutralize user-controllable input, which may allow the execution of malicious code within the user’s brow… |
CVE-2020-14490 | High | 8.8 | 2020-07-29 | OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensiti… |
CVE-2020-14489 | Medium | 6.2 | 2020-07-29 | OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password… |
CVE-2020-5614 | Medium | 5.3 | 2020-07-29 | Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2020-5613 | Medium | 6.1 | 2020-07-29 | Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. |
CVE-2020-5612 | Medium | 6.1 | 2020-07-29 | Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. |
CVE-2020-6098 | High | 7.5 | 2020-07-28 | An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger… |
CVE-2020-13997 | High | 7.5 | 2020-07-28 | In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. |
CVE-2020-13971 | Medium | 5.4 | 2020-07-28 | In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to… |
CVE-2020-13970 | High | 8.8 | 2020-07-28 | Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to s… |
CVE-2020-11476 | High | 7.2 | 2020-07-28 | Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file. |
CVE-2020-11474 | High | 7.8 | 2020-07-28 | NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant. |
CVE-2020-10985 | Medium | 4.8 | 2020-07-28 | Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php. |
CVE-2020-10984 | High | 8.8 | 2020-07-28 | Gambio GX before 4.0.1.0 allows admin/admin.php CSRF. |
CVE-2020-10983 | Medium | 4.9 | 2020-07-28 | Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php. |
CVE-2020-10982 | Medium | 4.9 | 2020-07-28 | Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php. |
CVE-2020-16094 | High | 7.5 | 2020-07-28 | In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirector… |
CVE-2020-5377 | Critical | 9.1 | 2020-07-28 | Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker coul… |
CVE-2020-15899 | High | 7.5 | 2020-07-28 | Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble. |
CVE-2020-15419 | High | 7.5 | 2020-07-28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not… |
CVE-2020-15418 | High | 7.5 | 2020-07-28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not… |
CVE-2020-15417 | Medium | 6.3 | 2020-07-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentica… |
CVE-2020-15416 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authenticat… |
CVE-2020-10930 | Medium | 6.5 | 2020-07-28 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Au… |
CVE-2020-10929 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentica… |
CVE-2020-10928 | High | 8.4 | 2020-07-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentica… |
CVE-2020-10927 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentica… |
CVE-2020-10926 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentica… |
CVE-2020-10925 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700 V1.0.4.84… |
CVE-2020-10924 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Although au… |
CVE-2020-10923 | High | 8.8 | 2020-07-28 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authenticat… |