2020 CVEs (page 156)
Page 156 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12625 | Medium | 6.1 | 2020-05-04 | An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can… |
CVE-2020-12624 | Medium | 6.5 | 2020-05-03 | The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image… |
CVE-2020-8157 | Medium | 6.8 | 2020-05-02 | UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial… |
CVE-2020-7645 | Critical | 9.8 | 2020-05-02 | All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems. |
CVE-2020-5727 | Medium | 4.6 | 2020-05-02 | Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an a… |
CVE-2020-10683 | Critical | 9.8 | 2020-05-01 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular exte… |
CVE-2020-7351 | High | 7.3 | 2020-05-01 | An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on t… |
CVE-2020-12474 | Medium | 6.5 | 2020-05-01 | Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public U… |
CVE-2020-12117 | Medium | 5.3 | 2020-05-01 | Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 48… |
CVE-2020-11037 | Medium | 6.1 | 2020-04-30 | In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagt… |
CVE-2020-11030 | Medium | 6.4 | 2020-04-30 | In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This… |
CVE-2020-11029 | Medium | 5.8 | 2020-04-30 | In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scripting (XSS) at… |
CVE-2020-11028 | Medium | 5.8 | 2020-04-30 | In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of condition… |
CVE-2020-11027 | Medium | 6.1 | 2020-04-30 | In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email… |
CVE-2020-11026 | High | 8.7 | 2020-04-30 | In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file… |
CVE-2020-11016 | Critical | 9.1 | 2020-04-30 | IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send… |
CVE-2020-9098 | High | 7.5 | 2020-04-30 | Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when… |
CVE-2020-6867 | Medium | 5.5 | 2020-04-30 | ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traff… |
CVE-2020-6866 | Medium | 4.9 | 2020-04-30 | A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a… |
CVE-2020-6865 | Medium | 6.5 | 2020-04-30 | ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the reques… |
CVE-2020-5892 | Medium | 6.7 | 2020-04-30 | In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from… |
CVE-2020-5890 | Medium | 5.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP… |
CVE-2020-5888 | High | 8.1 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for adjacent network (layer 2) attackers… |
CVE-2020-1817 | High | 7.8 | 2020-04-30 | Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local… |
CVE-2020-11025 | Medium | 5.8 | 2020-04-30 | In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Ex… |
CVE-2020-5893 | Low | 3.7 | 2020-04-30 | In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication request… |
CVE-2020-5891 | High | 7.5 | 2020-04-30 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server conf… |
CVE-2020-5889 | Medium | 5.4 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS afte… |
CVE-2020-5887 | Critical | 9.1 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daem… |
CVE-2020-5886 | Critical | 9.1 | 2020-04-30 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems setup for connection mirroring in a High Availability (HA) p… |
CVE-2020-5885 | Critical | 9.1 | 2020-04-30 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems set up for connection mirroring in a high availability (HA)… |
CVE-2020-5884 | Critical | 9.1 | 2020-04-30 | On versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the default deployment mode for BIG-IP high availability (… |
CVE-2020-5883 | High | 7.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached… |
CVE-2020-5882 | High | 7.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology (QA… |
CVE-2020-5881 | High | 7.5 | 2020-04-30 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices co… |
CVE-2020-5880 | High | 7.1 | 2020-04-30 | Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing t… |
CVE-2020-5879 | High | 7.5 | 2020-04-30 | On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL… |
CVE-2020-5878 | High | 7.5 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on BIG-IP Virtual Edition (VE) while proces… |
CVE-2020-5877 | High | 7.5 | 2020-04-30 | On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, malformed input to the DATAGRAM::tcp iRules command within a… |
CVE-2020-5876 | High | 8.1 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may m… |
CVE-2020-5875 | High | 7.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may generate a core file and restart while proc… |
CVE-2020-5874 | High | 7.5 | 2020-04-30 | On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM… |
CVE-2020-5873 | High | 7.2 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Adminis… |
CVE-2020-7136 | Critical | 9.8 | 2020-04-30 | A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provid… |
CVE-2020-5872 | High | 7.5 | 2020-04-30 | On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on… |
CVE-2020-5871 | High | 7.5 | 2020-04-30 | On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual servers. The problem can occur when ci… |
CVE-2020-11015 | High | 7.5 | 2020-04-30 | A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial… |
CVE-2020-1752 | High | 7.0 | 2020-04-30 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing a… |
CVE-2020-12050 | High | 7.0 | 2020-04-30 | SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can repl… |
CVE-2020-11652 | Medium | 6.5 | 2020-04-30 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that i… |
CVE-2020-11651 | Critical | 9.8 | 2020-04-30 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method ca… |
CVE-2020-10691 | Medium | 5.2 | 2020-04-30 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a coll… |
CVE-2020-6010 | High | 8.8 | 2020-04-30 | LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection |
CVE-2020-6579 | Medium | 6.1 | 2020-04-30 | Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez plugin for ZenCart b… |
CVE-2020-12101 | Medium | 4.3 | 2020-04-30 | The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id fi… |
CVE-2020-9387 | Medium | 4.3 | 2020-04-30 | In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the… |
CVE-2020-12283 | Medium | 6.1 | 2020-04-30 | Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.g… |
CVE-2020-12479 | High | 8.8 | 2020-04-29 | TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php… |
CVE-2020-12478 | High | 7.5 | 2020-04-29 | TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files. |
CVE-2020-12477 | High | 7.5 | 2020-04-29 | The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HT… |
CVE-2020-11943 | High | 8.8 | 2020-04-29 | An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. |
CVE-2020-11942 | Critical | 9.8 | 2020-04-29 | An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections. |
CVE-2020-11022 | Medium | 6.9 | 2020-04-29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (… |
CVE-2020-12471 | Critical | 9.8 | 2020-04-29 | MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in… |
CVE-2020-12470 | High | 7.2 | 2020-04-29 | MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. |
CVE-2020-12469 | Medium | 6.5 | 2020-04-29 | admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a blo… |
CVE-2020-12468 | High | 7.8 | 2020-04-29 | Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/. |
CVE-2020-12467 | Medium | 6.5 | 2020-04-29 | Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. |
CVE-2020-11024 | Medium | 6.1 | 2020-04-29 | In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvO… |
CVE-2020-11023 | Medium | 6.9 | 2020-04-29 | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it… |
CVE-2020-12473 | High | 7.2 | 2020-04-29 | MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program. |
CVE-2020-12472 | Medium | 5.4 | 2020-04-29 | MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. |
CVE-2020-12465 | Medium | 6.7 | 2020-04-29 | An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An o… |
CVE-2020-12464 | Medium | 6.7 | 2020-04-29 | usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad3… |
CVE-2020-11021 | Medium | 6.3 | 2020-04-29 | Actions Http-Client (NPM @actions/http-client) before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redirect scenarios. The c… |
CVE-2020-11020 | High | 8.5 | 2020-04-29 | Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vul… |
CVE-2020-12462 | Medium | 6.1 | 2020-04-29 | The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. |
CVE-2020-12461 | High | 8.8 | 2020-04-29 | PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be in… |
CVE-2020-12277 | Medium | 5.3 | 2020-04-29 | GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated. |
CVE-2020-12276 | Medium | 4.8 | 2020-04-29 | GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. |
CVE-2020-12275 | Medium | 5.3 | 2020-04-29 | GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API. |
CVE-2020-11009 | Medium | 6.5 | 2020-04-29 | In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to s… |
CVE-2020-8775 | High | 8.9 | 2020-04-29 | Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. |
CVE-2020-12459 | Medium | 5.5 | 2020-04-29 | In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_… |
CVE-2020-12458 | Medium | 5.5 | 2020-04-29 | An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are wo… |
CVE-2020-8774 | High | 8.8 | 2020-04-29 | Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. |
CVE-2020-8773 | High | 8.9 | 2020-04-29 | The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. |
CVE-2020-7804 | Medium | 6.4 | 2020-04-29 | ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method. |
CVE-2020-2575 | High | 7.5 | 2020-04-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior t… |
CVE-2020-12446 | High | 7.8 | 2020-04-29 | The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specif… |
CVE-2020-12252 | Medium | 6.2 | 2020-04-29 | An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file… |
CVE-2020-12251 | Low | 2.2 | 2020-04-29 | An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value (in the POST method) f… |
CVE-2020-11677 | High | 8.8 | 2020-04-29 | Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). |
CVE-2020-11676 | High | 8.8 | 2020-04-29 | Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). |
CVE-2020-11675 | High | 8.8 | 2020-04-29 | Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). |
CVE-2020-11674 | High | 8.8 | 2020-04-29 | Cerner medico 26.00 allows variable reuse, possibly causing data corruption. |
CVE-2020-11446 | High | 7.8 | 2020-04-29 | ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then… |
CVE-2020-10797 | Medium | 6.1 | 2020-04-29 | An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing… |
CVE-2020-12246 | High | 8.8 | 2020-04-29 | Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup… |
CVE-2020-11884 | High | 7.0 | 2020-04-29 | In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uacce… |