2020 CVEs (page 139)
Page 139 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0528 | High | 7.8 | 2020-06-15 | Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to pot… |
CVE-2020-0527 | Medium | 4.4 | 2020-06-15 | Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to potentially enable information disclosure vi… |
CVE-2020-14076 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbit… |
CVE-2020-14093 | Medium | 5.9 | 2020-06-15 | Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. |
CVE-2020-14081 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_pa… |
CVE-2020-14080 | Critical | 9.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arb… |
CVE-2020-14079 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbit… |
CVE-2020-14078 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbit… |
CVE-2020-14077 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbit… |
CVE-2020-14075 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect wi… |
CVE-2020-14074 | High | 8.8 | 2020-06-15 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbit… |
CVE-2020-14067 | Critical | 9.8 | 2020-06-15 | The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP c… |
CVE-2020-14060 | High | 8.1 | 2020-06-14 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JN… |
CVE-2020-14062 | High | 8.1 | 2020-06-14 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.interna… |
CVE-2020-14061 | High | 8.1 | 2020-06-14 | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionF… |
CVE-2020-13656 | Critical | 9.8 | 2020-06-12 | In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnera… |
CVE-2020-11839 | Medium | 6.1 | 2020-06-12 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities coul… |
CVE-2020-10752 | High | 7.5 | 2020-06-12 | A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurr… |
CVE-2020-11980 | Medium | 6.3 | 2020-06-12 | In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean… |
CVE-2020-4050 | Low | 3.5 | 2020-06-12 | In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an ad… |
CVE-2020-4049 | Low | 2.4 | 2020-06-12 | In affected versions of WordPress, when uploading themes, the name of the theme folder can be crafted in a way that could lead to JavaScript execution in /wp-a… |
CVE-2020-4048 | Medium | 5.7 | 2020-06-12 | In affected versions of WordPress, due to an issue in wp_validate_redirect() and URL sanitization, an arbitrary external link can be crafted leading to uninten… |
CVE-2020-4047 | Medium | 6.8 | 2020-06-12 | In affected versions of WordPress, authenticated users with upload permissions (like authors) are able to inject JavaScript into some media file attachment pag… |
CVE-2020-4046 | Medium | 5.4 | 2020-06-12 | In affected versions of WordPress, users with low privileges (like contributors and authors) can use the embed block in a certain way to inject unfiltered HTML… |
CVE-2020-14004 | High | 7.8 | 2020-06-12 | An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cm… |
CVE-2020-9651 | Medium | 6.1 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exploitation could lead to arbitrary javasc… |
CVE-2020-9648 | Medium | 6.1 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript executi… |
CVE-2020-9647 | Medium | 6.1 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javasc… |
CVE-2020-9645 | High | 7.5 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitiv… |
CVE-2020-9644 | Medium | 5.4 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascrip… |
CVE-2020-9643 | High | 7.5 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive info… |
CVE-2020-9636 | High | 8.8 | 2020-06-12 | Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9635 | High | 8.8 | 2020-06-12 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9634 | High | 8.8 | 2020-06-12 | Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2020-9633 | Critical | 9.8 | 2020-06-12 | Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Ed… |
CVE-2020-10732 | Low | 3.3 | 2020-06-12 | A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and… |
CVE-2020-4251 | Medium | 5.4 | 2020-06-12 | IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2020-3930 | Medium | 4.0 | 2020-06-12 | GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs. |
CVE-2020-3929 | Medium | 5.9 | 2020-06-12 | GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived key… |
CVE-2020-3928 | Medium | 6.2 | 2020-06-12 | GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices. |
CVE-2020-14048 | High | 7.5 | 2020-06-12 | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents. |
CVE-2020-4045 | High | 7.5 | 2020-06-11 | SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to, but the… |
CVE-2020-13250 | High | 7.5 | 2020-06-11 | HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of… |
CVE-2020-13170 | High | 7.5 | 2020-06-11 | HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary d… |
CVE-2020-12797 | Medium | 5.3 | 2020-06-11 | HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4… |
CVE-2020-12758 | High | 7.5 | 2020-06-11 | HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7… |
CVE-2020-12023 | Low | 2.0 | 2020-06-11 | Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliV… |
CVE-2020-13702 | Medium | 4.3 | 2020-06-11 | The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Pri… |
CVE-2020-12725 | High | 7.2 | 2020-06-11 | Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other… |
CVE-2020-5411 | High | 8.1 | 2020-06-11 | When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vul… |
CVE-2020-11614 | High | 8.1 | 2020-06-11 | Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform… |
CVE-2020-11613 | High | 7.8 | 2020-06-11 | Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. B… |
CVE-2020-0233 | High | 7.8 | 2020-06-11 | In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution… |
CVE-2020-0219 | High | 7.8 | 2020-06-11 | In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution… |
CVE-2020-0218 | High | 7.0 | 2020-06-11 | In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local e… |
CVE-2020-0217 | Critical | 9.8 | 2020-06-11 | In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no ad… |
CVE-2020-0216 | High | 7.8 | 2020-06-11 | In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of… |
CVE-2020-0215 | High | 7.8 | 2020-06-11 | In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation… |
CVE-2020-0214 | High | 7.5 | 2020-06-11 | In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information… |
CVE-2020-0213 | Medium | 6.5 | 2020-06-11 | In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2020-0212 | Medium | 6.5 | 2020-06-11 | In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2020-0211 | Medium | 6.5 | 2020-06-11 | In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2020-0210 | High | 7.8 | 2020-06-11 | In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of privil… |
CVE-2020-0209 | High | 7.8 | 2020-06-11 | In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execu… |
CVE-2020-0208 | High | 7.8 | 2020-06-11 | In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execu… |
CVE-2020-0207 | Medium | 6.5 | 2020-06-11 | In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no… |
CVE-2020-0206 | Medium | 5.5 | 2020-06-11 | In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the Settings app with User e… |
CVE-2020-0205 | Medium | 6.5 | 2020-06-11 | In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inform… |
CVE-2020-0204 | High | 7.0 | 2020-06-11 | In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escala… |
CVE-2020-0203 | High | 7.8 | 2020-06-11 | In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between c… |
CVE-2020-0202 | High | 7.8 | 2020-06-11 | In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission c… |
CVE-2020-0201 | Critical | 9.8 | 2020-06-11 | In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privil… |
CVE-2020-0200 | Medium | 6.5 | 2020-06-11 | In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0199 | Medium | 4.1 | 2020-06-11 | In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information di… |
CVE-2020-0198 | High | 7.5 | 2020-06-11 | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no… |
CVE-2020-0197 | Medium | 5.5 | 2020-06-11 | In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2020-0196 | Medium | 6.5 | 2020-06-11 | In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to re… |
CVE-2020-0195 | Medium | 6.5 | 2020-06-11 | In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninitialized da… |
CVE-2020-0194 | High | 8.8 | 2020-06-11 | In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code… |
CVE-2020-0193 | Medium | 6.5 | 2020-06-11 | In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buffer overflow. This… |
CVE-2020-0192 | Medium | 6.5 | 2020-06-11 | In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation. This could lead to remo… |
CVE-2020-0191 | Medium | 6.5 | 2020-06-11 | In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information d… |
CVE-2020-0190 | High | 8.8 | 2020-06-11 | In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no… |
CVE-2020-0189 | Medium | 6.5 | 2020-06-11 | In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop. This could lead to remote denial of service with no addit… |
CVE-2020-0188 | High | 7.8 | 2020-06-11 | In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escal… |
CVE-2020-0187 | Medium | 5.5 | 2020-06-11 | In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to loca… |
CVE-2020-0186 | Medium | 6.7 | 2020-06-11 | In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Sy… |
CVE-2020-0185 | Medium | 5.5 | 2020-06-11 | In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… |
CVE-2020-0184 | Medium | 6.5 | 2020-06-11 | In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check. This could lead to remote denial of service with no… |
CVE-2020-0183 | High | 7.8 | 2020-06-11 | In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2020-0182 | Medium | 6.5 | 2020-06-11 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2020-0181 | High | 7.5 | 2020-06-11 | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service… |
CVE-2020-0180 | Medium | 6.5 | 2020-06-11 | In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… |
CVE-2020-0179 | High | 7.8 | 2020-06-11 | In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of pr… |
CVE-2020-0178 | Medium | 5.5 | 2020-06-11 | In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosu… |
CVE-2020-0177 | Medium | 5.5 | 2020-06-11 | In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings… |
CVE-2020-0176 | High | 7.5 | 2020-06-11 | In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure w… |
CVE-2020-0175 | Medium | 6.5 | 2020-06-11 | In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no addit… |
CVE-2020-0174 | Medium | 6.5 | 2020-06-11 | In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additiona… |
CVE-2020-0173 | Medium | 6.5 | 2020-06-11 | In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additi… |