2020 CVEs (page 136)
Page 136 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-3626 | High | 7.8 | 2020-06-22 | Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2020-3614 | Critical | 9.8 | 2020-06-22 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2020-3613 | High | 7.8 | 2020-06-22 | Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8… |
CVE-2020-14962 | Medium | 5.4 | 2020-06-22 | Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via th… |
CVE-2020-14961 | Medium | 5.3 | 2020-06-22 | Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value. |
CVE-2020-14960 | High | 7.2 | 2020-06-22 | A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter, |
CVE-2020-14959 | Medium | 5.4 | 2020-06-22 | Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-… |
CVE-2020-14958 | Medium | 6.5 | 2020-06-21 | In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check. |
CVE-2020-14954 | Medium | 5.9 | 2020-06-21 | Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response… |
CVE-2020-14950 | High | 8.8 | 2020-06-21 | aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin reques… |
CVE-2020-14942 | Critical | 9.8 | 2020-06-21 | Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. |
CVE-2020-14933 | High | 8.8 | 2020-06-20 | compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this bec… |
CVE-2020-14932 | Critical | 9.8 | 2020-06-20 | compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php. |
CVE-2020-13264 | Medium | 5.3 | 2020-06-19 | Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token |
CVE-2020-13263 | High | 7.5 | 2020-06-19 | An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized user… |
CVE-2020-13261 | Medium | 5.3 | 2020-06-19 | Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code |
CVE-2020-14931 | Critical | 9.8 | 2020-06-19 | A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line… |
CVE-2020-13276 | High | 7.4 | 2020-06-19 | User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1 |
CVE-2020-13275 | High | 8.0 | 2020-06-19 | A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1 |
CVE-2020-13274 | High | 7.5 | 2020-06-19 | A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through… |
CVE-2020-13273 | High | 7.5 | 2020-06-19 | A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1 |
CVE-2020-13272 | High | 7.5 | 2020-06-19 | OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow |
CVE-2020-13265 | Medium | 4.3 | 2020-06-19 | User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification |
CVE-2020-13262 | Medium | 6.1 | 2020-06-19 | Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on b… |
CVE-2020-14930 | High | 8.1 | 2020-06-19 | An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification t… |
CVE-2020-10750 | High | 7.1 | 2020-06-19 | Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw… |
CVE-2020-9495 | Medium | 5.3 | 2020-06-19 | Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by… |
CVE-2020-14929 | High | 7.5 | 2020-06-19 | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure beha… |
CVE-2020-8167 | Medium | 6.5 | 2020-06-19 | A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. |
CVE-2020-8165 | Critical | 9.8 | 2020-06-19 | A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects i… |
CVE-2020-3972 | Low | 3.3 | 2020-06-19 | VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Success… |
CVE-2020-13277 | Medium | 6.3 | 2020-06-19 | An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5 |
CVE-2020-8184 | High | 7.5 | 2020-06-19 | A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker… |
CVE-2020-8164 | High | 7.5 | 2020-06-19 | A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadverte… |
CVE-2020-8162 | High | 7.5 | 2020-06-19 | A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Conten… |
CVE-2020-14927 | Medium | 4.8 | 2020-06-19 | Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen. |
CVE-2020-14926 | Medium | 5.4 | 2020-06-19 | CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page. |
CVE-2020-14475 | Medium | 6.1 | 2020-06-19 | A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (… |
CVE-2020-13961 | Medium | 6.5 | 2020-06-19 | Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any s… |
CVE-2020-4297 | Medium | 5.4 | 2020-06-19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja… |
CVE-2020-4295 | Medium | 5.4 | 2020-06-19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja… |
CVE-2020-4281 | Medium | 5.4 | 2020-06-19 | IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja… |
CVE-2020-14470 | Medium | 6.5 | 2020-06-19 | In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password. |
CVE-2020-14460 | Medium | 6.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAuth application does not always require… |
CVE-2020-14459 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.19.0. Attackers can rename a channel and cause a collision with a direct message, aka MMSA-2020-0002. |
CVE-2020-14458 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0004. |
CVE-2020-14457 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020… |
CVE-2020-14456 | High | 7.3 | 2020-06-19 | An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-202… |
CVE-2020-14455 | Medium | 6.5 | 2020-06-19 | An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007. |
CVE-2020-14454 | Medium | 6.1 | 2020-06-19 | An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandle… |
CVE-2020-14453 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, which allows attackers to cause a denial o… |
CVE-2020-14452 | Medium | 5.3 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-0014. |
CVE-2020-14451 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMS… |
CVE-2020-14450 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side), aka MMSA-2020-00… |
CVE-2020-14449 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018. |
CVE-2020-14448 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service (infinite loop), aka… |
CVE-2020-14447 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-… |
CVE-2020-14462 | Medium | 5.4 | 2020-06-19 | CALDERA 2.7.0 allows XSS via the Operation Name box. |
CVE-2020-7679 | High | 7.3 | 2020-06-19 | In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution. |
CVE-2020-14019 | High | 7.8 | 2020-06-19 | Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus per… |
CVE-2020-5590 | High | 8.1 | 2020-06-19 | Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or director… |
CVE-2020-4059 | High | 7.3 | 2020-06-18 | In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnera… |
CVE-2020-12887 | High | 7.5 | 2020-06-18 | Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing r… |
CVE-2020-12886 | Critical | 9.1 | 2020-06-18 | A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-12885 | High | 7.5 | 2020-06-18 | An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_co… |
CVE-2020-12884 | Critical | 9.1 | 2020-06-18 | A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-12883 | Critical | 9.1 | 2020-06-18 | Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_… |
CVE-2020-14446 | Medium | 6.1 | 2020-06-18 | An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0. An open redirect exists. |
CVE-2020-14445 | Medium | 5.4 | 2020-06-18 | An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulner… |
CVE-2020-14444 | Medium | 5.4 | 2020-06-18 | An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulner… |
CVE-2020-14443 | High | 8.8 | 2020-06-18 | A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the i… |
CVE-2020-13882 | Medium | 4.2 | 2020-06-18 | CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not wor… |
CVE-2020-14442 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14441 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14440 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14439 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14438 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14437 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14436 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753… |
CVE-2020-14435 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 be… |
CVE-2020-14434 | Medium | 6.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S befo… |
CVE-2020-14433 | Medium | 6.8 | 2020-06-18 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBK842 befor… |
CVE-2020-14432 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by CSRF. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25… |
CVE-2020-14431 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before… |
CVE-2020-14430 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before… |
CVE-2020-14429 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects MK62 before 1.0.4.92, MK63 before 1.0.4.92, MR60 before 1.0.4.92… |
CVE-2020-14428 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before… |
CVE-2020-14427 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before… |
CVE-2020-14426 | High | 8.8 | 2020-06-18 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before… |
CVE-2020-11503 | Critical | 9.8 | 2020-06-18 | A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remot… |
CVE-2020-13640 | Critical | 9.8 | 2020-06-18 | A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order p… |
CVE-2020-9225 | High | 7.8 | 2020-06-18 | FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assignment when an acto… |
CVE-2020-1835 | Medium | 6.5 | 2020-06-18 | HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system h… |
CVE-2020-1834 | Medium | 4.6 | 2020-06-18 | HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an insufficient integr… |
CVE-2020-14423 | Medium | 5.3 | 2020-06-18 | Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOS_LOCAL_SECRET value, affecting… |
CVE-2020-14422 | Medium | 5.9 | 2020-06-18 | Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to… |
CVE-2020-14421 | High | 7.2 | 2020-06-18 | aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen. |
CVE-2020-10782 | Medium | 6.5 | 2020-06-18 | An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable and expose… |
CVE-2020-14416 | Medium | 4.2 | 2020-06-18 | In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0a… |
CVE-2020-3368 | Medium | 5.8 | 2020-06-18 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote… |