2020 CVEs (page 123)
Page 123 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0226 | High | 7.8 | 2020-07-17 | In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in th… |
CVE-2020-0225 | Critical | 9.8 | 2020-07-17 | In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check. This could lea… |
CVE-2020-0224 | Critical | 9.8 | 2020-07-17 | In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when pro… |
CVE-2020-0122 | Medium | 6.7 | 2020-07-17 | In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. T… |
CVE-2020-0107 | Medium | 5.5 | 2020-07-17 | In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local informatio… |
CVE-2020-15816 | High | 8.8 | 2020-07-17 | In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the applicat… |
CVE-2020-0305 | Medium | 6.4 | 2020-07-17 | In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution p… |
CVE-2020-0120 | High | 7.8 | 2020-07-17 | In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation… |
CVE-2020-1655 | Medium | 5.3 | 2020-07-17 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2… |
CVE-2020-1654 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Den… |
CVE-2020-1653 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (… |
CVE-2020-1652 | Medium | 5.6 | 2020-07-17 | OpenNMS is accessible via port 9443 |
CVE-2020-1651 | Medium | 6.5 | 2020-07-17 | On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the li… |
CVE-2020-1650 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. B… |
CVE-2020-1649 | High | 7.5 | 2020-07-17 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2… |
CVE-2020-1648 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This… |
CVE-2020-1647 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free vulnerability can lead to a Denial of S… |
CVE-2020-1646 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon (RPD) crash and r… |
CVE-2020-1645 | High | 8.3 | 2020-07-17 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1644 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly… |
CVE-2020-1643 | Medium | 5.5 | 2020-07-17 | Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routi… |
CVE-2020-1641 | Medium | 6.5 | 2020-07-17 | A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service (DoS)… |
CVE-2020-1640 | High | 7.5 | 2020-07-17 | An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an… |
CVE-2020-15813 | High | 8.1 | 2020-07-17 | Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configu… |
CVE-2020-5131 | High | 7.8 | 2020-07-17 | SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same p… |
CVE-2020-5130 | Medium | 5.3 | 2020-07-17 | SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerabi… |
CVE-2020-15497 | Medium | 5.3 | 2020-07-17 | jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not… |
CVE-2020-7826 | High | 8.8 | 2020-07-17 | EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to th… |
CVE-2020-7825 | High | 8.8 | 2020-07-17 | A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could exec… |
CVE-2020-15807 | Medium | 6.5 | 2020-07-17 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. |
CVE-2020-15586 | Medium | 5.9 | 2020-07-17 | Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a r… |
CVE-2020-14928 | Medium | 5.9 | 2020-07-17 | evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads add… |
CVE-2020-14039 | Medium | 5.3 | 2020-07-17 | In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equa… |
CVE-2020-14001 | Critical | 9.8 | 2020-07-17 | The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as templat… |
CVE-2020-4464 | High | 8.8 | 2020-07-17 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafte… |
CVE-2020-7696 | Medium | 5.3 | 2020-07-17 | This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }}… |
CVE-2020-7684 | High | 7.5 | 2020-07-17 | This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation. |
CVE-2020-15803 | Medium | 6.1 | 2020-07-17 | Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget. |
CVE-2020-15801 | Critical | 9.8 | 2020-07-17 | In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name… |
CVE-2020-9688 | High | 7.8 | 2020-07-17 | Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9682 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary f… |
CVE-2020-9673 | High | 7.8 | 2020-07-17 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Succes… |
CVE-2020-9672 | High | 7.8 | 2020-07-17 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Succes… |
CVE-2020-9671 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privil… |
CVE-2020-9670 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege e… |
CVE-2020-9669 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lead to privi… |
CVE-2020-9650 | High | 7.8 | 2020-07-17 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9649 | Medium | 5.5 | 2020-07-17 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2020-9646 | High | 7.8 | 2020-07-17 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9485 | Medium | 6.1 | 2020-07-17 | An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI. |
CVE-2020-11983 | Medium | 5.4 | 2020-07-17 | An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escapin… |
CVE-2020-11982 | Critical | 9.8 | 2020-07-17 | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly… |
CVE-2020-11981 | Critical | 9.8 | 2020-07-17 | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly… |
CVE-2020-11978 | High | 8.8 | 2020-07-17 | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shippe… |
CVE-2020-12015 | High | 7.5 | 2020-07-16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue aff… |
CVE-2020-12013 | Critical | 9.1 | 2020-07-16 | A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC… |
CVE-2020-12007 | Critical | 9.8 | 2020-07-16 | A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserializat… |
CVE-2020-12009 | High | 7.5 | 2020-07-16 | A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This aff… |
CVE-2020-4095 | Medium | 6.0 | 2020-07-16 | "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to c… |
CVE-2020-13405 | High | 7.5 | 2020-07-16 | userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POS… |
CVE-2020-12011 | Critical | 9.8 | 2020-07-16 | A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affe… |
CVE-2020-3468 | Medium | 5.4 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection a… |
CVE-2020-3450 | Medium | 4.9 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrativ… |
CVE-2020-3437 | Medium | 6.5 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on… |
CVE-2020-3406 | Medium | 5.4 | 2020-07-16 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-sit… |
CVE-2020-3405 | High | 7.3 | 2020-07-16 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that… |
CVE-2020-3401 | Medium | 6.5 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal… |
CVE-2020-3388 | High | 7.8 | 2020-07-16 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with ro… |
CVE-2020-3387 | High | 8.8 | 2020-07-16 | A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The… |
CVE-2020-3385 | Medium | 6.5 | 2020-07-16 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of… |
CVE-2020-3381 | High | 8.8 | 2020-07-16 | A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal a… |
CVE-2020-3380 | High | 7.8 | 2020-07-16 | A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to elevate privileges to root and execute a… |
CVE-2020-3379 | High | 7.8 | 2020-07-16 | A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operati… |
CVE-2020-3378 | Medium | 4.3 | 2020-07-16 | A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity o… |
CVE-2020-3372 | Medium | 6.5 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive syste… |
CVE-2020-3370 | Medium | 5.8 | 2020-07-16 | A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering o… |
CVE-2020-3369 | High | 7.5 | 2020-07-16 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of s… |
CVE-2020-3358 | High | 8.6 | 2020-07-16 | A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause… |
CVE-2020-3357 | Critical | 9.8 | 2020-07-16 | A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow… |
CVE-2020-3351 | High | 8.6 | 2020-07-16 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabili… |
CVE-2020-3349 | Medium | 4.8 | 2020-07-16 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to con… |
CVE-2020-3348 | Medium | 4.8 | 2020-07-16 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to con… |
CVE-2020-3345 | Medium | 4.3 | 2020-07-16 | A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web pa… |
CVE-2020-3332 | High | 8.8 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, re… |
CVE-2020-3331 | Critical | 9.8 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthentic… |
CVE-2020-3330 | Critical | 9.8 | 2020-07-16 | A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take fu… |
CVE-2020-3323 | Critical | 9.8 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote… |
CVE-2020-3197 | Medium | 5.3 | 2020-07-16 | A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT (T… |
CVE-2020-3180 | High | 7.8 | 2020-07-16 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a de… |
CVE-2020-3150 | Medium | 5.9 | 2020-07-16 | A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote attacker… |
CVE-2020-3146 | High | 8.8 | 2020-07-16 | Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction V… |
CVE-2020-3145 | High | 8.8 | 2020-07-16 | Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction V… |
CVE-2020-3144 | Critical | 9.8 | 2020-07-16 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router… |
CVE-2020-3140 | Critical | 9.8 | 2020-07-16 | A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthori… |
CVE-2020-4462 | High | 8.2 | 2020-07-16 | IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an… |
CVE-2020-4316 | Medium | 4.7 | 2020-07-16 | IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the co… |
CVE-2020-15027 | Critical | 9.8 | 2020-07-16 | ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This… |
CVE-2020-14000 | Critical | 9.8 | 2020-07-16 | MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ chara… |
CVE-2020-10288 | Critical | 9.8 | 2020-07-15 | IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever… |
CVE-2020-10287 | Critical | 9.8 | 2020-07-15 | The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documente… |