2020 CVEs (page 157)
Page 157 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-3955 | Critical | 9.3 | 2020-04-29 | ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual… |
CVE-2020-12447 | High | 7.5 | 2020-04-29 | A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files… |
CVE-2020-8489 | High | 7.8 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker au… |
CVE-2020-8488 | High | 7.8 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenti… |
CVE-2020-8487 | Medium | 6.6 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker authenticated on the… |
CVE-2020-8486 | Medium | 6.6 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker authenticated on the… |
CVE-2020-8485 | High | 7.8 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated… |
CVE-2020-8484 | High | 7.8 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on… |
CVE-2020-8481 | Critical | 9.8 | 2020-04-29 | For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0… |
CVE-2020-8479 | Critical | 9.4 | 2020-04-29 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI… |
CVE-2020-8478 | Medium | 5.3 | 2020-04-29 | Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Softw… |
CVE-2020-8476 | Medium | 5.3 | 2020-04-29 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI… |
CVE-2020-8475 | Medium | 5.3 | 2020-04-29 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI… |
CVE-2020-8471 | High | 7.8 | 2020-04-29 | For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI… |
CVE-2020-12443 | Critical | 9.8 | 2020-04-29 | BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFile… |
CVE-2020-8473 | High | 7.3 | 2020-04-29 | Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and… |
CVE-2020-8472 | Medium | 5.5 | 2020-04-29 | Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Pro… |
CVE-2020-7453 | Medium | 6.0 | 2020-04-29 | In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null… |
CVE-2020-7452 | Critical | 9.1 | 2020-04-29 | In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE before 11.3-RELEASE-p7, incorrect use… |
CVE-2020-12442 | Critical | 9.8 | 2020-04-28 | Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250. |
CVE-2020-12261 | Medium | 5.4 | 2020-04-28 | Open-AudIT 3.3.0 allows an XSS attack after login. |
CVE-2020-12103 | High | 7.7 | 2020-04-28 | In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of file… |
CVE-2020-12438 | Medium | 5.4 | 2020-04-28 | An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stri… |
CVE-2020-12102 | High | 7.7 | 2020-04-28 | In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to e… |
CVE-2020-10663 | High | 7.5 | 2020-04-28 | The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability… |
CVE-2020-7451 | Medium | 5.3 | 2020-04-28 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK… |
CVE-2020-12430 | Medium | 6.5 | 2020-04-28 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomain… |
CVE-2020-12429 | Critical | 9.8 | 2020-04-28 | Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages… |
CVE-2020-11014 | Medium | 6.1 | 2020-04-28 | Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the Electron Cash SLP Edition are at risk of… |
CVE-2020-9482 | Medium | 6.5 | 2020-04-28 | If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication tok… |
CVE-2020-7644 | High | 8.1 | 2020-04-28 | fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' us… |
CVE-2020-12243 | High | 7.5 | 2020-04-28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash). |
CVE-2020-10641 | High | 7.5 | 2020-04-28 | An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in co… |
CVE-2020-1745 | High | 8.6 | 2020-04-28 | A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before… |
CVE-2020-4329 | Medium | 4.3 | 2020-04-28 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive info… |
CVE-2020-1774 | Medium | 4.5 | 2020-04-28 | When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send p… |
CVE-2020-12078 | High | 8.8 | 2020-04-28 | An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit… |
CVE-2020-10944 | Medium | 5.4 | 2020-04-28 | HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrar… |
CVE-2020-10094 | Medium | 5.4 | 2020-04-28 | A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2… |
CVE-2020-10093 | Medium | 5.4 | 2020-04-28 | A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. |
CVE-2020-12286 | Medium | 4.3 | 2020-04-28 | In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped… |
CVE-2020-5570 | Medium | 5.4 | 2020-04-28 | Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or… |
CVE-2020-12284 | Critical | 9.8 | 2020-04-28 | cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing… |
CVE-2020-5568 | Medium | 6.1 | 2020-04-28 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Message… |
CVE-2020-5567 | High | 7.5 | 2020-04-28 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu. |
CVE-2020-5566 | Medium | 4.3 | 2020-04-28 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the application… |
CVE-2020-5565 | Medium | 4.3 | 2020-04-28 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applica… |
CVE-2020-5564 | Medium | 6.1 | 2020-04-28 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'. |
CVE-2020-5563 | Medium | 5.3 | 2020-04-28 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API. |
CVE-2020-5562 | Medium | 4.9 | 2020-04-28 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary H… |
CVE-2020-9481 | High | 7.5 | 2020-04-27 | Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack. |
CVE-2020-7640 | Critical | 9.8 | 2020-04-27 | pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitizati… |
CVE-2020-7609 | Critical | 9.8 | 2020-04-27 | node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users wi… |
CVE-2020-7067 | High | 7.5 | 2020-04-27 | In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be ma… |
CVE-2020-1762 | High | 7.0 | 2020-04-27 | An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could… |
CVE-2020-1722 | Medium | 5.3 | 2020-04-27 | A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing proce… |
CVE-2020-11869 | Low | 3.3 | 2020-04-27 | An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/displ… |
CVE-2020-9294 | Critical | 9.8 | 2020-04-27 | An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthentica… |
CVE-2020-1952 | Critical | 9.8 | 2020-04-27 | An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients cou… |
CVE-2020-12279 | Critical | 9.8 | 2020-04-27 | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. Thi… |
CVE-2020-12278 | Critical | 9.8 | 2020-04-27 | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Strea… |
CVE-2020-11941 | High | 8.8 | 2020-04-27 | An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
CVE-2020-9488 | Low | 3.7 | 2020-04-27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-mid… |
CVE-2020-9068 | Critical | 9.8 | 2020-04-27 | Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authenti… |
CVE-2020-1880 | Medium | 5.5 | 2020-04-27 | Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to t… |
CVE-2020-9072 | Medium | 6.7 | 2020-04-27 | Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs… |
CVE-2020-7135 | High | 7.8 | 2020-04-27 | A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE serv… |
CVE-2020-1845 | Medium | 6.7 | 2020-04-27 | Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform spe… |
CVE-2020-1807 | Low | 3.5 | 2020-04-27 | HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restr… |
CVE-2020-1806 | High | 7.1 | 2020-04-27 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not suffic… |
CVE-2020-1805 | High | 7.1 | 2020-04-27 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not suffic… |
CVE-2020-1804 | High | 7.1 | 2020-04-27 | Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not suffic… |
CVE-2020-12266 | High | 7.5 | 2020-04-27 | An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for i… |
CVE-2020-12242 | High | 7.8 | 2020-04-27 | Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account. |
CVE-2020-12138 | High | 8.8 | 2020-04-27 | AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical… |
CVE-2020-12133 | Critical | 9.8 | 2020-04-27 | The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserializa… |
CVE-2020-12120 | High | 7.5 | 2020-04-27 | The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can b… |
CVE-2020-11822 | Medium | 6.1 | 2020-04-27 | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious scri… |
CVE-2020-11821 | Medium | 5.3 | 2020-04-27 | In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply… |
CVE-2020-11817 | Critical | 9.8 | 2020-04-27 | In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can exec… |
CVE-2020-11810 | Low | 3.7 | 2020-04-27 | An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such pack… |
CVE-2020-11415 | Medium | 4.9 | 2020-04-27 | An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username… |
CVE-2020-9489 | Medium | 5.5 | 2020-04-27 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or i… |
CVE-2020-12272 | Medium | 5.3 | 2020-04-27 | OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail mes… |
CVE-2020-11420 | Medium | 6.5 | 2020-04-27 | UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating… |
CVE-2020-12274 | Critical | 9.8 | 2020-04-27 | In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to… |
CVE-2020-12273 | High | 7.5 | 2020-04-27 | In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. |
CVE-2020-12052 | Medium | 6.1 | 2020-04-27 | Grafana version < 6.7.3 is vulnerable for annotation popup XSS. |
CVE-2020-10997 | Medium | 6.5 | 2020-04-27 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at ru… |
CVE-2020-10996 | High | 8.1 | 2020-04-27 | An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transition_key for SST processes in place… |
CVE-2020-10664 | High | 7.5 | 2020-04-27 | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. |
CVE-2020-12271 | Critical | 9.8 | 2020-04-27 | A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. Thi… |
CVE-2020-12270 | Medium | 6.5 | 2020-04-27 | React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 c… |
CVE-2020-12268 | Critical | 9.8 | 2020-04-27 | jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. |
CVE-2020-12267 | Critical | 9.8 | 2020-04-27 | setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. |
CVE-2020-12265 | Critical | 9.8 | 2020-04-26 | The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Director… |
CVE-2020-12254 | High | 7.8 | 2020-04-26 | Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink. |
CVE-2020-6213 | Medium | 6.1 | 2020-04-24 | SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to r… |
CVE-2020-6212 | Medium | 5.4 | 2020-04-24 | Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA… |
CVE-2020-12070 | High | 7.5 | 2020-04-24 | The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request vi… |