2020 CVEs (page 151)
Page 151 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10958 | Medium | 5.3 | 2020-05-18 | In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead t… |
CVE-2020-10957 | High | 7.5 | 2020-05-18 | In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login… |
CVE-2020-12259 | Medium | 5.4 | 2020-05-18 | rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting… |
CVE-2020-13129 | High | 7.2 | 2020-05-18 | An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_ke… |
CVE-2020-12860 | Medium | 5.3 | 2020-05-18 | COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all o… |
CVE-2020-12859 | Medium | 5.3 | 2020-05-18 | Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by observing cleartext p… |
CVE-2020-12858 | High | 7.5 | 2020-05-18 | Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running… |
CVE-2020-12857 | High | 7.5 | 2020-05-18 | Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COV… |
CVE-2020-12856 | Critical | 9.8 | 2020-05-18 | OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct… |
CVE-2020-13128 | High | 7.5 | 2020-05-18 | An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thr… |
CVE-2020-4345 | Low | 3.3 | 2020-05-17 | IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that… |
CVE-2020-13126 | Critical | 9.9 | 2020-05-17 | An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An att… |
CVE-2020-13125 | Medium | 6.5 | 2020-05-17 | An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE… |
CVE-2020-13121 | Medium | 6.1 | 2020-05-16 | Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt. |
CVE-2020-13118 | Critical | 9.8 | 2020-05-16 | An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community.php via the parameter community. |
CVE-2020-13111 | High | 7.5 | 2020-05-16 | NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a chunk. A remote at… |
CVE-2020-13110 | High | 7.8 | 2020-05-16 | The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerbe… |
CVE-2020-13109 | Critical | 9.8 | 2020-05-16 | Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem beca… |
CVE-2020-8149 | Critical | 9.8 | 2020-05-15 | Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1. |
CVE-2020-1758 | Medium | 5.3 | 2020-05-15 | A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. Thi… |
CVE-2020-13093 | Medium | 5.3 | 2020-05-15 | iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal. |
CVE-2020-13092 | Critical | 9.8 | 2020-05-15 | scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce… |
CVE-2020-13091 | Critical | 9.8 | 2020-05-15 | pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system… |
CVE-2020-12872 | Medium | 5.5 | 2020-05-15 | yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP… |
CVE-2020-12889 | Critical | 9.8 | 2020-05-15 | MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case. |
CVE-2020-12888 | Medium | 5.3 | 2020-05-15 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. |
CVE-2020-12798 | High | 7.8 | 2020-05-15 | Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog tha… |
CVE-2020-12651 | Critical | 9.8 | 2020-05-15 | SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line numb… |
CVE-2020-12834 | Critical | 9.8 | 2020-05-15 | eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthe… |
CVE-2020-12685 | Medium | 6.1 | 2020-05-15 | XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data… |
CVE-2020-11526 | Low | 2.2 | 2020-05-15 | libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read. |
CVE-2020-11525 | Low | 2.2 | 2020-05-15 | libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. |
CVE-2020-11524 | Medium | 6.6 | 2020-05-15 | libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. |
CVE-2020-11523 | Medium | 6.6 | 2020-05-15 | libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow. |
CVE-2020-11522 | Medium | 6.5 | 2020-05-15 | libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. |
CVE-2020-11521 | Medium | 6.6 | 2020-05-15 | libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. |
CVE-2020-7809 | Medium | 4.4 | 2020-05-15 | ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A r… |
CVE-2020-9073 | Low | 2.4 | 2020-05-15 | Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when… |
CVE-2020-3810 | Medium | 5.5 | 2020-05-15 | Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb file… |
CVE-2020-1808 | High | 7.1 | 2020-05-15 | Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); ver… |
CVE-2020-10744 | Medium | 5.0 | 2020-05-15 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The pro… |
CVE-2020-8100 | Critical | 9.0 | 2020-05-15 | Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while s… |
CVE-2020-12882 | Medium | 5.4 | 2020-05-15 | Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow. |
CVE-2020-11931 | Low | 3.3 | 2020-05-15 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restri… |
CVE-2020-12068 | Medium | 6.5 | 2020-05-14 | An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation. |
CVE-2020-12046 | Medium | 5.7 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace l… |
CVE-2020-12042 | Medium | 6.5 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an atta… |
CVE-2020-10620 | Critical | 9.8 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly… |
CVE-2020-10616 | High | 8.8 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and e… |
CVE-2020-10612 | Critical | 9.1 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any re… |
CVE-2020-0221 | Critical | 9.8 | 2020-05-14 | Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer wit… |
CVE-2020-0220 | Medium | 6.7 | 2020-05-14 | In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2020-0110 | High | 7.8 | 2020-05-14 | In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition… |
CVE-2020-0109 | High | 7.8 | 2020-05-14 | In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by… |
CVE-2020-0106 | Medium | 5.5 | 2020-05-14 | In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local informatio… |
CVE-2020-0105 | High | 7.8 | 2020-05-14 | In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps t… |
CVE-2020-0104 | Medium | 5.5 | 2020-05-14 | In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclo… |
CVE-2020-0103 | Critical | 9.8 | 2020-05-14 | In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no… |
CVE-2020-0102 | High | 7.8 | 2020-05-14 | In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… |
CVE-2020-0101 | Medium | 5.5 | 2020-05-14 | In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure w… |
CVE-2020-0100 | Medium | 5.5 | 2020-05-14 | In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data fro… |
CVE-2020-0098 | High | 7.8 | 2020-05-14 | In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege w… |
CVE-2020-0097 | High | 7.8 | 2020-05-14 | In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local es… |
CVE-2020-0096 | High | 7.8 | 2020-05-14 | In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation o… |
CVE-2020-0094 | High | 7.8 | 2020-05-14 | In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2020-0093 | Medium | 5.0 | 2020-05-14 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-0092 | Medium | 5.0 | 2020-05-14 | In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This c… |
CVE-2020-0091 | Medium | 5.5 | 2020-05-14 | In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 |
CVE-2020-0090 | Medium | 5.5 | 2020-05-14 | An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 |
CVE-2020-0065 | Medium | 5.5 | 2020-05-14 | An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448 |
CVE-2020-0064 | Medium | 5.5 | 2020-05-14 | An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855 |
CVE-2020-0024 | High | 7.8 | 2020-05-14 | In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalatio… |
CVE-2020-12877 | High | 7.5 | 2020-05-14 | Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication. |
CVE-2020-12876 | High | 7.5 | 2020-05-14 | Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server dep… |
CVE-2020-12875 | Medium | 6.3 | 2020-05-14 | Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive informat… |
CVE-2020-12874 | Critical | 9.8 | 2020-05-14 | Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to the server. |
CVE-2020-5408 | Medium | 6.5 | 2020-05-14 | Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null in… |
CVE-2020-12677 | Medium | 6.1 | 2020-05-14 | An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could al… |
CVE-2020-1960 | Medium | 4.7 | 2020-05-14 | A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3… |
CVE-2020-1941 | Medium | 6.1 | 2020-05-14 | In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue. |
CVE-2020-11973 | Critical | 9.8 | 2020-05-14 | Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgra… |
CVE-2020-11972 | Critical | 9.8 | 2020-05-14 | Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should up… |
CVE-2020-11971 | High | 7.5 | 2020-05-14 | Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0. |
CVE-2020-4468 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a v… |
CVE-2020-4467 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a v… |
CVE-2020-4422 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4365 | Medium | 4.3 | 2020-05-14 | IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker coul… |
CVE-2020-4343 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4299 | Medium | 4.3 | 2020-05-14 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM… |
CVE-2020-4288 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persua… |
CVE-2020-4287 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persua… |
CVE-2020-4285 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persua… |
CVE-2020-4266 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4265 | High | 7.3 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4264 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4263 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4262 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4261 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |
CVE-2020-4259 | Medium | 6.5 | 2020-05-14 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cook… |
CVE-2020-4258 | High | 7.8 | 2020-05-14 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a… |