2020 CVEs (page 124)
Page 124 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15780 | Medium | 6.7 | 2020-07-15 | An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by atta… |
CVE-2020-15107 | Medium | 5.3 | 2020-07-15 | In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V… |
CVE-2020-10286 | High | 8.8 | 2020-07-15 | the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gai… |
CVE-2020-9311 | Medium | 5.4 | 2020-07-15 | In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for o… |
CVE-2020-9309 | High | 8.8 | 2020-07-15 | Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TX… |
CVE-2020-8958 | High | 7.2 | 2020-07-15 | Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary… |
CVE-2020-6165 | Medium | 5.3 | 2020-07-15 | SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The autom… |
CVE-2020-6164 | High | 7.5 | 2020-07-15 | In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a doma… |
CVE-2020-15779 | High | 7.5 | 2020-07-15 | A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../… |
CVE-2020-15051 | Medium | 6.1 | 2020-07-15 | An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Databas… |
CVE-2020-14982 | Medium | 6.5 | 2020-07-15 | A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter)… |
CVE-2020-13788 | Medium | 4.3 | 2020-07-15 | Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's… |
CVE-2020-10285 | Critical | 9.8 | 2020-07-15 | The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to… |
CVE-2020-15718 | Medium | 6.1 | 2020-07-15 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit t… |
CVE-2020-15603 | High | 7.5 | 2020-07-15 | An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to mani… |
CVE-2020-15602 | High | 7.8 | 2020-07-15 | An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could a… |
CVE-2020-15366 | Medium | 5.6 | 2020-07-15 | An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows exec… |
CVE-2020-14066 | High | 8.8 | 2020-07-15 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access. |
CVE-2020-14065 | Medium | 6.5 | 2020-07-15 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. |
CVE-2020-14064 | Medium | 6.5 | 2020-07-15 | IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. |
CVE-2020-12854 | High | 8.8 | 2020-07-15 | A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a… |
CVE-2020-12684 | Critical | 9.8 | 2020-07-15 | XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to… |
CVE-2020-11439 | High | 8.8 | 2020-07-15 | LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application. |
CVE-2020-11438 | High | 8.8 | 2020-07-15 | LibreHealth EMR v2.0.0 is affected by systemic CSRF. |
CVE-2020-11437 | Medium | 4.3 | 2020-07-15 | LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database. |
CVE-2020-11436 | Critical | 9.0 | 2020-07-15 | LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators. |
CVE-2020-10284 | Critical | 9.1 | 2020-07-15 | No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a pass… |
CVE-2020-15717 | Medium | 6.1 | 2020-07-15 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this… |
CVE-2020-15716 | Medium | 6.1 | 2020-07-15 | RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this… |
CVE-2020-2984 | High | 7.1 | 2020-07-15 | Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). The supported version that… |
CVE-2020-2983 | High | 7.1 | 2020-07-15 | Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). Supported versions that are affected ar… |
CVE-2020-2982 | High | 7.1 | 2020-07-15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that a… |
CVE-2020-2981 | High | 7.0 | 2020-07-15 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability… |
CVE-2020-2978 | Medium | 4.1 | 2020-07-15 | Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c… |
CVE-2020-2977 | Medium | 4.6 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2976 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2975 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2974 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2973 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2972 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2971 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2969 | Medium | 6.6 | 2020-07-15 | Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficu… |
CVE-2020-2968 | High | 8.0 | 2020-07-15 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult… |
CVE-2020-2967 | High | 7.5 | 2020-07-15 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0… |
CVE-2020-2966 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1… |
CVE-2020-2562 | Medium | 6.1 | 2020-07-15 | Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported versions that are af… |
CVE-2020-2513 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vuln… |
CVE-2020-2228 | High | 8.8 | 2020-07-15 | Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalation vulnerability. |
CVE-2020-2227 | Medium | 5.4 | 2020-07-15 | Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerab… |
CVE-2020-2226 | Medium | 5.4 | 2020-07-15 | Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scriptin… |
CVE-2020-2225 | Medium | 5.4 | 2020-07-15 | Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in… |
CVE-2020-2224 | Medium | 5.4 | 2020-07-15 | Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in… |
CVE-2020-2223 | Medium | 5.4 | 2020-07-15 | Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console pa… |
CVE-2020-2222 | Medium | 5.4 | 2020-07-15 | Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-sit… |
CVE-2020-2221 | Medium | 5.4 | 2020-07-15 | Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-… |
CVE-2020-2220 | Medium | 5.4 | 2020-07-15 | Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vuln… |
CVE-2020-15117 | Medium | 6.5 | 2020-07-15 | In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295)… |
CVE-2020-14724 | High | 7.3 | 2020-07-15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploita… |
CVE-2020-14723 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versions that are affected are 11.1.1.9.0 and… |
CVE-2020-14722 | Medium | 5.8 | 2020-07-15 | Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are aff… |
CVE-2020-14721 | Medium | 6.3 | 2020-07-15 | Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are aff… |
CVE-2020-14720 | High | 7.7 | 2020-07-15 | Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affe… |
CVE-2020-14719 | High | 7.7 | 2020-07-15 | Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affe… |
CVE-2020-14718 | High | 7.2 | 2020-07-15 | Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Supported versions that are affected are 19.3.2 and 20.1.0… |
CVE-2020-14717 | Medium | 4.7 | 2020-07-15 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affe… |
CVE-2020-14716 | Medium | 4.7 | 2020-07-15 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affe… |
CVE-2020-14715 | Medium | 4.4 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14714 | Medium | 4.4 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14713 | High | 7.5 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14712 | Medium | 5.0 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14711 | Medium | 6.5 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14710 | Medium | 5.4 | 2020-07-15 | Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). Supported versions that are a… |
CVE-2020-14709 | High | 7.1 | 2020-07-15 | Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Card). Supported versions that are affec… |
CVE-2020-14708 | Medium | 4.3 | 2020-07-15 | Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). Supported versions that are af… |
CVE-2020-14707 | Medium | 5.0 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14706 | Medium | 5.9 | 2020-07-15 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported ver… |
CVE-2020-14705 | Critical | 9.6 | 2020-07-15 | Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management). The supported version that is affected is Prior to 19.1.0… |
CVE-2020-14704 | Medium | 6.0 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14703 | Medium | 6.0 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14702 | Medium | 4.9 | 2020-07-15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior… |
CVE-2020-14701 | Critical | 10.0 | 2020-07-15 | Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface). The supported version that is affected is 8… |
CVE-2020-14700 | Medium | 5.3 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14699 | High | 7.5 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14698 | Medium | 5.3 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14697 | High | 7.2 | 2020-07-15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior… |
CVE-2020-14696 | High | 7.2 | 2020-07-15 | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates). Supported versions that are affected are 11.1.1.9.0… |
CVE-2020-14695 | Medium | 5.3 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14694 | Medium | 5.3 | 2020-07-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior t… |
CVE-2020-14693 | Medium | 6.5 | 2020-07-15 | Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions tha… |
CVE-2020-14692 | Medium | 6.5 | 2020-07-15 | Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interf… |
CVE-2020-14691 | High | 7.1 | 2020-07-15 | Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interface). The sup… |
CVE-2020-14690 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions tha… |
CVE-2020-14688 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affe… |
CVE-2020-14687 | Critical | 9.8 | 2020-07-15 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2020-14686 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-… |
CVE-2020-14685 | Medium | 6.5 | 2020-07-15 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastruct… |
CVE-2020-14684 | Medium | 4.3 | 2020-07-15 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastruct… |
CVE-2020-14682 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are… |
CVE-2020-14681 | High | 8.2 | 2020-07-15 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1… |
CVE-2020-14680 | Medium | 6.5 | 2020-07-15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exp… |