2020 CVEs (page 122)
Page 122 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6526 | Medium | 6.5 | 2020-07-22 | Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted… |
CVE-2020-6525 | High | 8.8 | 2020-07-22 | Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6524 | High | 8.8 | 2020-07-22 | Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2020-6523 | High | 8.8 | 2020-07-22 | Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6522 | Critical | 9.6 | 2020-07-22 | Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox es… |
CVE-2020-6521 | Medium | 6.5 | 2020-07-22 | Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from… |
CVE-2020-6520 | High | 8.8 | 2020-07-22 | Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6519 | Medium | 6.5 | 2020-07-22 | Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2020-6518 | High | 8.8 | 2020-07-22 | Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potenti… |
CVE-2020-6517 | High | 8.8 | 2020-07-22 | Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6516 | Medium | 4.3 | 2020-07-22 | Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2020-6515 | High | 8.8 | 2020-07-22 | Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6514 | Medium | 6.5 | 2020-07-22 | Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap… |
CVE-2020-6513 | High | 8.8 | 2020-07-22 | Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2020-6512 | High | 8.8 | 2020-07-22 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6511 | Medium | 6.5 | 2020-07-22 | Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2020-6510 | High | 7.8 | 2020-07-22 | Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2020-6509 | Critical | 9.6 | 2020-07-22 | Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially p… |
CVE-2020-6507 | High | 8.8 | 2020-07-22 | Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6506 | Medium | 6.5 | 2020-07-22 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted… |
CVE-2020-6505 | Critical | 9.6 | 2020-07-22 | Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2020-8559 | Medium | 6.4 | 2020-07-22 | The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied… |
CVE-2020-12774 | High | 8.2 | 2020-07-22 | D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command. |
CVE-2020-15890 | High | 7.5 | 2020-07-21 | LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled. |
CVE-2020-15889 | Critical | 9.8 | 2020-07-21 | Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. |
CVE-2020-15888 | High | 8.8 | 2020-07-21 | Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read… |
CVE-2020-15724 | High | 7.8 | 2020-07-21 | In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. A… |
CVE-2020-15723 | High | 7.8 | 2020-07-21 | In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege es… |
CVE-2020-15722 | High | 7.8 | 2020-07-21 | In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker… |
CVE-2020-15102 | Medium | 6.5 | 2020-07-21 | In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is… |
CVE-2020-14063 | Medium | 6.1 | 2020-07-21 | A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inje… |
CVE-2020-15879 | High | 7.5 | 2020-07-21 | Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain… |
CVE-2020-15877 | High | 8.8 | 2020-07-21 | An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware'… |
CVE-2020-15873 | Medium | 6.5 | 2020-07-21 | In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php. |
CVE-2020-15859 | Low | 3.3 | 2020-07-21 | QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO a… |
CVE-2020-15866 | Critical | 9.8 | 2020-07-21 | mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggere… |
CVE-2020-12499 | High | 8.2 | 2020-07-21 | In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files. |
CVE-2020-12432 | Medium | 6.1 | 2020-07-21 | The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIM… |
CVE-2020-4125 | High | 8.1 | 2020-07-20 | Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the… |
CVE-2020-13932 | Medium | 6.1 | 2020-07-20 | In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability… |
CVE-2020-6103 | Critical | 9.9 | 2020-07-20 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can… |
CVE-2020-6102 | Critical | 9.9 | 2020-07-20 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can… |
CVE-2020-6101 | Critical | 9.9 | 2020-07-20 | An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can… |
CVE-2020-6100 | Critical | 9.9 | 2020-07-20 | An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory… |
CVE-2020-3442 | Medium | 4.8 | 2020-07-20 | The DuoConnect client enables users to establish SSH connections to hosts protected by a DNG instance. When a user initiates an SSH connection to a DNG-protect… |
CVE-2020-1776 | Low | 3.5 | 2020-07-20 | When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the cas… |
CVE-2020-15852 | High | 7.8 | 2020-07-20 | An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permiss… |
CVE-2020-6872 | Medium | 6.1 | 2020-07-20 | The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which w… |
CVE-2020-6871 | Critical | 9.8 | 2020-07-20 | The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute… |
CVE-2020-3481 | High | 7.5 | 2020-07-20 | A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacke… |
CVE-2020-15123 | Critical | 9.3 | 2020-07-20 | In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability. Clients of the codecov-node library are unlikely to be a… |
CVE-2020-15121 | High | 7.4 | 2020-07-20 | In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the execut… |
CVE-2020-15118 | Medium | 5.7 | 2020-07-20 | In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the `wagtail.contrib.forms` app, and the page te… |
CVE-2020-15111 | Medium | 4.2 | 2020-07-20 | In Fiber before version 1.12.6, the filename that is given in c.Attachment() (https://docs.gofiber.io/ctx#attachment) is not escaped, and therefore vulnerable… |
CVE-2020-15053 | Medium | 6.1 | 2020-07-20 | An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, P… |
CVE-2020-15052 | High | 7.5 | 2020-07-20 | An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields. |
CVE-2020-8214 | High | 7.5 | 2020-07-20 | A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file. |
CVE-2020-7680 | Medium | 6.1 | 2020-07-20 | docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from ser… |
CVE-2020-12031 | High | 7.5 | 2020-07-20 | In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt… |
CVE-2020-12028 | High | 7.3 | 2020-07-20 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpo… |
CVE-2020-12027 | Medium | 4.3 | 2020-07-20 | All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to… |
CVE-2020-8215 | High | 8.8 | 2020-07-20 | A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provid… |
CVE-2020-8205 | High | 7.5 | 2020-07-20 | The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local o… |
CVE-2020-14494 | Critical | 9.8 | 2020-07-20 | OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect agains… |
CVE-2020-14491 | Medium | 6.5 | 2020-07-20 | OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access priv… |
CVE-2020-14485 | Critical | 9.8 | 2020-07-20 | OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with lim… |
CVE-2020-14484 | Critical | 9.8 | 2020-07-20 | OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attac… |
CVE-2020-12029 | Critical | 9.0 | 2020-07-20 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to e… |
CVE-2020-4527 | Medium | 5.9 | 2020-07-20 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the Secure flag for the session cookie i… |
CVE-2020-4466 | Medium | 6.5 | 2020-07-20 | IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within the Queue processing… |
CVE-2020-4361 | Medium | 4.3 | 2020-07-20 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTTP responses. IBM X-Force ID… |
CVE-2020-15009 | High | 7.8 | 2020-07-20 | AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX… |
CVE-2020-15842 | High | 8.1 | 2020-07-20 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to e… |
CVE-2020-15841 | High | 8.3 | 2020-07-20 | Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a… |
CVE-2020-9256 | Medium | 6.5 | 2020-07-18 | Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly re… |
CVE-2020-9101 | Medium | 6.5 | 2020-07-18 | There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the pack… |
CVE-2020-9259 | Medium | 6.5 | 2020-07-17 | Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerability. The system does not sufficiently… |
CVE-2020-9257 | High | 8.8 | 2020-07-17 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 1… |
CVE-2020-9255 | Medium | 5.5 | 2020-07-17 | Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. Certain service in the system does not s… |
CVE-2020-9254 | High | 7.8 | 2020-07-17 | HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 1… |
CVE-2020-9252 | Low | 2.3 | 2020-07-17 | HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlie… |
CVE-2020-9227 | Medium | 5.5 | 2020-07-17 | Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into… |
CVE-2020-9102 | Low | 3.3 | 2020-07-17 | There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the impr… |
CVE-2020-7818 | High | 7.8 | 2020-07-17 | DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Att… |
CVE-2020-7206 | Critical | 9.8 | 2020-07-17 | HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability. |
CVE-2020-5769 | Medium | 5.4 | 2020-07-17 | Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS)… |
CVE-2020-5768 | Medium | 4.9 | 2020-07-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 all… |
CVE-2020-5767 | Medium | 6.5 | 2020-07-17 | Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking le… |
CVE-2020-10605 | High | 7.5 | 2020-07-17 | Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files. |
CVE-2020-5759 | Critical | 9.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute com… |
CVE-2020-5758 | High | 8.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute co… |
CVE-2020-5757 | Critical | 9.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass com… |
CVE-2020-5756 | High | 8.8 | 2020-07-17 | Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can u… |
CVE-2020-4104 | Medium | 5.4 | 2020-07-17 | HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an… |
CVE-2020-15110 | Medium | 6.8 | 2020-07-17 | In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of ot… |
CVE-2020-15108 | High | 7.1 | 2020-07-17 | In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1. |
CVE-2020-0231 | Critical | 9.8 | 2020-07-17 | There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156333727 |
CVE-2020-0230 | Critical | 9.8 | 2020-07-17 | There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156337262 |
CVE-2020-0228 | High | 7.5 | 2020-07-17 | There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-156333723 |
CVE-2020-0227 | High | 7.8 | 2020-07-17 | In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalati… |