2020 CVEs (page 140)
Page 140 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0172 | Medium | 6.5 | 2020-06-11 | In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional… |
CVE-2020-0171 | Medium | 6.5 | 2020-06-11 | In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additiona… |
CVE-2020-0170 | Medium | 6.5 | 2020-06-11 | In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additio… |
CVE-2020-0169 | Medium | 6.5 | 2020-06-11 | In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additio… |
CVE-2020-0168 | High | 8.8 | 2020-06-11 | In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to re… |
CVE-2020-0167 | Medium | 5.5 | 2020-06-11 | In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additi… |
CVE-2020-0166 | High | 7.8 | 2020-06-11 | In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead t… |
CVE-2020-0165 | Medium | 6.7 | 2020-06-11 | In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local e… |
CVE-2020-0164 | Medium | 4.4 | 2020-06-11 | In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2020-0163 | Medium | 6.5 | 2020-06-11 | In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remot… |
CVE-2020-0162 | Medium | 6.5 | 2020-06-11 | In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to rem… |
CVE-2020-0161 | Medium | 6.5 | 2020-06-11 | In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with n… |
CVE-2020-0160 | High | 8.8 | 2020-06-11 | In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service wit… |
CVE-2020-0159 | Medium | 5.5 | 2020-06-11 | In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wit… |
CVE-2020-0158 | Medium | 4.4 | 2020-06-11 | In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2020-0157 | Medium | 4.9 | 2020-06-11 | In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0156 | Medium | 5.5 | 2020-06-11 | In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2020-0155 | High | 7.8 | 2020-06-11 | In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati… |
CVE-2020-0154 | Medium | 4.4 | 2020-06-11 | In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure v… |
CVE-2020-0153 | Medium | 6.7 | 2020-06-11 | In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2020-0152 | Medium | 4.4 | 2020-06-11 | In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2020-0151 | Medium | 4.4 | 2020-06-11 | In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information d… |
CVE-2020-0150 | High | 7.8 | 2020-06-11 | In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2020-0149 | Medium | 4.4 | 2020-06-11 | In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2020-0148 | Medium | 4.4 | 2020-06-11 | In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read… |
CVE-2020-0147 | Medium | 4.4 | 2020-06-11 | In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2020-0146 | Medium | 4.4 | 2020-06-11 | In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2020-0145 | Medium | 4.4 | 2020-06-11 | In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2020-0144 | Medium | 4.4 | 2020-06-11 | In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via… |
CVE-2020-0143 | Medium | 4.4 | 2020-06-11 | In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2020-0142 | High | 7.5 | 2020-06-11 | In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2020-0141 | Medium | 4.4 | 2020-06-11 | In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information disclos… |
CVE-2020-0140 | High | 7.5 | 2020-06-11 | In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0139 | Medium | 4.4 | 2020-06-11 | In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a ma… |
CVE-2020-0138 | Critical | 9.8 | 2020-06-11 | In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluet… |
CVE-2020-0137 | High | 7.8 | 2020-06-11 | In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead… |
CVE-2020-0136 | High | 7.8 | 2020-06-11 | In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in th… |
CVE-2020-0135 | Medium | 4.4 | 2020-06-11 | In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local informatio… |
CVE-2020-0134 | Medium | 5.5 | 2020-06-11 | In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no… |
CVE-2020-0133 | High | 7.3 | 2020-06-11 | In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escala… |
CVE-2020-0132 | Medium | 5.5 | 2020-06-11 | In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local informatio… |
CVE-2020-0131 | High | 8.8 | 2020-06-11 | In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution wit… |
CVE-2020-0129 | High | 7.8 | 2020-06-11 | In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
CVE-2020-0128 | High | 7.5 | 2020-06-11 | In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no… |
CVE-2020-0127 | Medium | 6.5 | 2020-06-11 | In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosur… |
CVE-2020-0126 | Medium | 6.4 | 2020-06-11 | In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System executi… |
CVE-2020-0124 | Medium | 6.7 | 2020-06-11 | In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2020-6090 | High | 7.2 | 2020-06-11 | An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of… |
CVE-2020-4101 | Critical | 9.8 | 2020-06-11 | "HCL Digital Experience is susceptible to Server Side Request Forgery." |
CVE-2020-12712 | High | 7.5 | 2020-06-11 | A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the… |
CVE-2020-4380 | Medium | 5.4 | 2020-06-11 | IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alt… |
CVE-2020-5593 | High | 8.8 | 2020-06-11 | Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. |
CVE-2020-5592 | Medium | 6.1 | 2020-06-11 | Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors. |
CVE-2020-13855 | High | 7.2 | 2020-06-11 | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. |
CVE-2020-13854 | Critical | 9.8 | 2020-06-11 | Artica Pandora FMS 7.44 allows privilege escalation. |
CVE-2020-13853 | Medium | 5.4 | 2020-06-11 | Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. |
CVE-2020-13852 | High | 7.2 | 2020-06-11 | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. |
CVE-2020-13851 | High | 8.8 | 2020-06-11 | Artica Pandora FMS 7.44 allows remote command execution via the events feature. |
CVE-2020-13850 | High | 7.5 | 2020-06-11 | Artica Pandora FMS 7.44 has inadequate access controls on a web folder. |
CVE-2020-13998 | Medium | 5.3 | 2020-06-11 | Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page o… |
CVE-2020-12850 | High | 7.0 | 2020-06-11 | The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Cells Enterprise OVF (such as version 2.0… |
CVE-2020-12714 | Medium | 5.9 | 2020-06-11 | An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-… |
CVE-2020-12713 | High | 7.2 | 2020-06-11 | An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 throug… |
CVE-2020-11090 | High | 7.5 | 2020-06-11 | In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed… |
CVE-2020-13901 | Critical | 9.8 | 2020-06-10 | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow. |
CVE-2020-13900 | High | 7.5 | 2020-06-10 | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference. |
CVE-2020-13899 | High | 7.5 | 2020-06-10 | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uniniti… |
CVE-2020-13898 | High | 7.5 | 2020-06-10 | An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference. |
CVE-2020-5363 | High | 8.6 | 2020-06-10 | Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface… |
CVE-2020-5362 | High | 7.1 | 2020-06-10 | Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized act… |
CVE-2020-4043 | High | 7.7 | 2020-06-10 | phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected… |
CVE-2020-13238 | High | 7.5 | 2020-06-10 | Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the networ… |
CVE-2020-11622 | High | 7.5 | 2020-06-10 | A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M… |
CVE-2020-10705 | High | 7.5 | 2020-06-10 | A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memor… |
CVE-2020-13906 | High | 7.8 | 2020-06-10 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. |
CVE-2020-13905 | High | 8.8 | 2020-06-10 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. |
CVE-2020-13445 | High | 8.8 | 2020-06-10 | In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict us… |
CVE-2020-13444 | Medium | 6.5 | 2020-06-10 | Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information re… |
CVE-2020-13223 | High | 7.5 | 2020-06-10 | HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2. |
CVE-2020-12757 | Critical | 9.8 | 2020-06-10 | HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default ti… |
CVE-2020-2033 | Medium | 5.3 | 2020-06-10 | When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication coo… |
CVE-2020-2032 | High | 7.0 | 2020-06-10 | A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges… |
CVE-2020-2029 | High | 7.2 | 2020-06-10 | An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root pri… |
CVE-2020-2028 | High | 7.2 | 2020-06-10 | An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges whe… |
CVE-2020-2027 | High | 7.2 | 2020-06-10 | A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and pote… |
CVE-2020-2026 | High | 7.8 | 2020-06-10 | A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple containers) can trick the kata runtime into… |
CVE-2020-2023 | Low | 3.8 | 2020-06-10 | Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on… |
CVE-2020-14012 | Medium | 5.4 | 2020-06-10 | scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. |
CVE-2020-14010 | Medium | 6.1 | 2020-06-10 | The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter. |
CVE-2020-11798 | Medium | 5.3 | 2020-06-10 | A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access… |
CVE-2020-0121 | Medium | 5.5 | 2020-06-10 | In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of loc… |
CVE-2020-0119 | Medium | 5.3 | 2020-06-10 | In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validat… |
CVE-2020-0118 | High | 7.8 | 2020-06-10 | In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of pr… |
CVE-2020-0117 | Critical | 9.8 | 2020-06-10 | In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth serve… |
CVE-2020-0116 | Medium | 5.5 | 2020-06-10 | In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to… |
CVE-2020-0115 | High | 7.8 | 2020-06-10 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary d… |
CVE-2020-0114 | High | 7.8 | 2020-06-10 | In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation o… |
CVE-2020-0113 | Medium | 5.5 | 2020-06-10 | In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure… |
CVE-2020-7589 | Critical | 9.1 | 2020-06-10 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the… |
CVE-2020-7586 | High | 7.8 | 2020-06-10 | A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions <… |