2020 CVEs (page 12)
Page 12 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15339 | Medium | 6.1 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS. |
CVE-2020-15338 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests. |
CVE-2020-15337 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests. |
CVE-2020-15334 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file. |
CVE-2020-15333 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_users" and "select * from Users_users"… |
CVE-2020-15332 | Critical | 9.8 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions. |
CVE-2020-15331 | Critical | 9.8 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess. |
CVE-2020-15330 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess. |
CVE-2020-15329 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions. |
CVE-2020-15328 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions. |
CVE-2020-15327 | High | 7.5 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication. |
CVE-2020-15326 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem. |
CVE-2020-15325 | Medium | 5.3 | 2022-09-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication. |
CVE-2020-36521 | High | 7.1 | 2022-09-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS… |
CVE-2020-36604 | High | 8.1 | 2022-09-23 | hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function. |
CVE-2020-36602 | Medium | 6.1 | 2022-09-20 | There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed me… |
CVE-2020-25491 | Medium | 6.1 | 2022-09-16 | 6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the A… |
CVE-2020-36601 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. |
CVE-2020-36600 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2020-23560 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab. |
CVE-2020-23559 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f. |
CVE-2020-23558 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b. |
CVE-2020-23557 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d. |
CVE-2020-23556 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28. |
CVE-2020-23555 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e. |
CVE-2020-23554 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20. |
CVE-2020-23553 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33. |
CVE-2020-23552 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62. |
CVE-2020-23551 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30. |
CVE-2020-23550 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82. |
CVE-2020-36603 | Medium | 6.5 | 2022-09-14 | The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local… |
CVE-2020-19587 | Medium | 5.4 | 2022-09-14 | Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdm… |
CVE-2020-19586 | Critical | 9.0 | 2022-09-14 | Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI. |
CVE-2020-10735 | High | 7.5 | 2022-09-09 | A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an i… |
CVE-2020-19914 | Medium | 6.1 | 2022-09-07 | Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function. |
CVE-2020-21516 | Critical | 9.8 | 2022-09-06 | There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code. |
CVE-2020-29260 | High | 7.5 | 2022-09-02 | libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). |
CVE-2020-22669 | Critical | 9.8 | 2022-09-02 | Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable… |
CVE-2020-4301 | Medium | 6.5 | 2022-09-01 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized… |
CVE-2020-35535 | Medium | 5.5 | 2022-09-01 | In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. |
CVE-2020-35534 | Medium | 5.5 | 2022-09-01 | In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files. |
CVE-2020-35533 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the… |
CVE-2020-35532 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered v… |
CVE-2020-35531 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an i… |
CVE-2020-35530 | Medium | 5.5 | 2022-09-01 | In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a cr… |
CVE-2020-35527 | Critical | 9.8 | 2022-09-01 | In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. |
CVE-2020-35525 | High | 7.5 | 2022-09-01 | In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. |
CVE-2020-27784 | Medium | 5.5 | 2022-09-01 | A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev insta… |
CVE-2020-35538 | Medium | 5.5 | 2022-08-31 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. |
CVE-2020-26938 | High | 7.2 | 2022-08-29 | In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked… |
CVE-2020-27802 | Medium | 5.5 | 2022-08-25 | An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27801 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27800 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27799 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27798 | Medium | 5.5 | 2022-08-25 | An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27797 | Medium | 5.5 | 2022-08-25 | An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27796 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-35511 | High | 7.8 | 2022-08-23 | A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. |
CVE-2020-35509 | Medium | 5.4 | 2022-08-23 | A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missin… |
CVE-2020-35992 | Medium | 6.5 | 2022-08-23 | Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access to the configuration file (specifically… |
CVE-2020-27836 | Critical | 9.8 | 2022-08-22 | A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access… |
CVE-2020-27795 | High | 7.5 | 2022-08-19 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, inp… |
CVE-2020-27794 | Critical | 9.1 | 2022-08-19 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and p… |
CVE-2020-27793 | High | 7.5 | 2022-08-19 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a de… |
CVE-2020-27792 | High | 7.1 | 2022-08-19 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to tri… |
CVE-2020-23466 | Medium | 5.4 | 2022-08-19 | Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipco… |
CVE-2020-36599 | Critical | 9.8 | 2022-08-18 | lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value. |
CVE-2020-27788 | Medium | 5.5 | 2022-08-18 | An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input f… |
CVE-2020-27790 | Medium | 5.5 | 2022-08-18 | A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input f… |
CVE-2020-27787 | Medium | 5.5 | 2022-08-18 | A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address acc… |
CVE-2020-14394 | Low | 3.2 | 2022-08-17 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw all… |
CVE-2020-1756 | High | 7.2 | 2022-08-16 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool. |
CVE-2020-1755 | Medium | 5.3 | 2022-08-16 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks. |
CVE-2020-14379 | Medium | 5.6 | 2022-08-16 | A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information di… |
CVE-2020-14322 | High | 7.5 | 2022-08-16 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service. |
CVE-2020-14321 | High | 8.8 | 2022-08-16 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course. |
CVE-2020-14320 | Medium | 6.1 | 2022-08-16 | In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk. |
CVE-2020-10728 | High | 7.8 | 2022-08-16 | A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissions allowing an unau… |
CVE-2020-10710 | Medium | 4.4 | 2022-08-16 | A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an atta… |
CVE-2020-23622 | High | 7.5 | 2022-08-15 | An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in… |
CVE-2020-21642 | Critical | 9.8 | 2022-08-15 | Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run… |
CVE-2020-21641 | High | 7.5 | 2022-08-15 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enume… |
CVE-2020-21365 | High | 7.5 | 2022-08-15 | Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted ht… |
CVE-2020-1754 | Medium | 4.3 | 2022-08-05 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewi… |
CVE-2020-1691 | Medium | 5.4 | 2022-08-05 | In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting. |
CVE-2020-7795 | High | 7.3 | 2022-08-02 | The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js. |
CVE-2020-28453 | Critical | 9.4 | 2022-08-02 | This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js. |
CVE-2020-28451 | Critical | 9.8 | 2022-08-02 | This affects the package image-tiler before 2.0.2. |
CVE-2020-28437 | Critical | 9.4 | 2022-08-02 | This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js. |
CVE-2020-28434 | Critical | 9.4 | 2022-08-02 | This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js. |
CVE-2020-28433 | High | 7.3 | 2022-08-02 | This affects all versions of package node-latex-pdf. |
CVE-2020-28425 | High | 7.3 | 2022-08-02 | This affects all versions of package curljs. |
CVE-2020-28424 | High | 7.2 | 2022-08-02 | This affects all versions of package s3-kilatstorage. |
CVE-2020-28423 | Critical | 9.8 | 2022-08-02 | This affects all versions of package monorepo-build. |
CVE-2020-6998 | Medium | 5.8 | 2022-07-27 | The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage… |
CVE-2020-36290 | Medium | 5.4 | 2022-07-26 | The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 al… |
CVE-2020-7678 | High | 8.6 | 2022-07-25 | This affects all versions of package node-import. The "params" argument of module function can be controlled by users without any sanitization.b. This is then… |
CVE-2020-7677 | High | 8.6 | 2022-07-25 | This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provi… |
CVE-2020-7649 | Medium | 4.9 | 2022-07-25 | This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal. |
CVE-2020-28471 | High | 7.3 | 2022-07-25 | This affects the package properties-reader before 2.2.0. |