2020 CVEs (page 159)
Page 159 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7055 | Critical | 9.9 | 2020-04-22 | An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code… |
CVE-2020-12066 | High | 7.5 | 2020-04-22 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. |
CVE-2020-11011 | Critical | 9.9 | 2020-04-22 | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version… |
CVE-2020-7642 | Medium | 5.4 | 2020-04-22 | lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeop… |
CVE-2020-5740 | High | 7.8 | 2020-04-22 | Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges. |
CVE-2020-10712 | High | 7.0 | 2020-04-22 | A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an… |
CVE-2020-8477 | High | 8.8 | 2020-04-22 | The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to… |
CVE-2020-8474 | High | 7.8 | 2020-04-22 | Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, all… |
CVE-2020-4085 | Medium | 6.5 | 2020-04-22 | "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." |
CVE-2020-11938 | Medium | 4.9 | 2020-04-22 | In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved… |
CVE-2020-11796 | Critical | 9.8 | 2020-04-22 | In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. |
CVE-2020-11795 | High | 7.5 | 2020-04-22 | In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. |
CVE-2020-11693 | High | 7.5 | 2020-04-22 | JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue. |
CVE-2020-11692 | Low | 2.7 | 2020-04-22 | In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. |
CVE-2020-11691 | High | 7.5 | 2020-04-22 | In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. |
CVE-2020-11690 | Critical | 9.8 | 2020-04-22 | In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. |
CVE-2020-11689 | Medium | 6.5 | 2020-04-22 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. |
CVE-2020-11688 | High | 7.5 | 2020-04-22 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. |
CVE-2020-11687 | High | 7.5 | 2020-04-22 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. |
CVE-2020-11686 | Low | 2.7 | 2020-04-22 | In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. |
CVE-2020-11685 | High | 7.5 | 2020-04-22 | In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. |
CVE-2020-11539 | High | 8.1 | 2020-04-22 | An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security leve… |
CVE-2020-11416 | Medium | 5.4 | 2020-04-22 | JetBrains Space through 2020-04-22 allows stored XSS in Chats. |
CVE-2020-12059 | High | 7.5 | 2020-04-22 | An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception. |
CVE-2020-12051 | High | 7.5 | 2020-04-21 | The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta… |
CVE-2020-5301 | Low | 3.0 | 2020-04-21 | SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for… |
CVE-2020-11008 | Medium | 4.0 | 2020-04-21 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is simi… |
CVE-2020-10569 | Critical | 9.8 | 2020-04-21 | SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access t… |
CVE-2020-8895 | High | 7.8 | 2020-04-21 | Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to… |
CVE-2020-5268 | Medium | 6.5 | 2020-04-21 | In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some c… |
CVE-2020-1757 | High | 8.1 | 2020-04-21 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final… |
CVE-2020-1699 | High | 7.5 | 2020-04-21 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions… |
CVE-2020-11891 | Medium | 5.3 | 2020-04-21 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups. |
CVE-2020-11890 | Medium | 5.3 | 2020-04-21 | An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. |
CVE-2020-11889 | Medium | 5.3 | 2020-04-21 | An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups. |
CVE-2020-10787 | High | 8.8 | 2020-04-21 | An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-passwo… |
CVE-2020-10786 | High | 8.8 | 2020-04-21 | A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs. |
CVE-2020-1967 | High | 7.5 | 2020-04-21 | Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a res… |
CVE-2020-11828 | High | 7.5 | 2020-04-21 | In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on th… |
CVE-2020-8099 | High | 7.1 | 2020-04-21 | A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restor… |
CVE-2020-11968 | High | 7.5 | 2020-04-21 | In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. Note: The vendor claims that this vulner… |
CVE-2020-11967 | Critical | 9.8 | 2020-04-21 | In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The ven… |
CVE-2020-11966 | Critical | 9.8 | 2020-04-21 | In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor c… |
CVE-2020-11965 | Critical | 9.8 | 2020-04-21 | In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access via SSH. Note: The vendor claims that thi… |
CVE-2020-11964 | High | 7.5 | 2020-04-21 | In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendo… |
CVE-2020-11963 | Critical | 9.8 | 2020-04-21 | IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter Injection. N… |
CVE-2020-11958 | High | 7.8 | 2020-04-21 | re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. |
CVE-2020-9279 | Critical | 9.8 | 2020-04-20 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in use… |
CVE-2020-9278 | Critical | 9.1 | 2020-04-20 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an unauthenticated URL. |
CVE-2020-9277 | Critical | 9.8 | 2020-04-20 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administ… |
CVE-2020-9276 | High | 8.8 | 2020-04-20 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the device's web servers, is v… |
CVE-2020-9275 | Critical | 9.8 | 2020-04-20 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of admin… |
CVE-2020-11944 | Medium | 6.1 | 2020-04-20 | Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFoun… |
CVE-2020-11010 | Medium | 6.3 | 2020-04-20 | In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/t… |
CVE-2020-11946 | High | 7.5 | 2020-04-20 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. |
CVE-2020-9445 | Medium | 6.1 | 2020-04-20 | Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality. |
CVE-2020-9444 | Medium | 6.1 | 2020-04-20 | Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. |
CVE-2020-9070 | Medium | 5.5 | 2020-04-20 | Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently v… |
CVE-2020-3946 | High | 7.5 | 2020-04-20 | InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to Billion laughs attack… |
CVE-2020-1803 | Medium | 5.3 | 2020-04-20 | Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C4… |
CVE-2020-10935 | Medium | 5.4 | 2020-04-20 | Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover. |
CVE-2020-11753 | High | 8.8 | 2020-04-20 | An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, mo… |
CVE-2020-5293 | Medium | 6.5 | 2020-04-20 | In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The… |
CVE-2020-5288 | Medium | 4.1 | 2020-04-20 | "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5. |
CVE-2020-5287 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5. |
CVE-2020-5286 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5 |
CVE-2020-5285 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5 |
CVE-2020-5279 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.p… |
CVE-2020-5278 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5 |
CVE-2020-5276 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5 |
CVE-2020-5272 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7… |
CVE-2020-5271 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fi… |
CVE-2020-5270 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts can be many, and vary from the theft of… |
CVE-2020-5269 | Medium | 4.1 | 2020-04-20 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in… |
CVE-2020-5265 | Medium | 4.4 | 2020-04-20 | In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5. |
CVE-2020-5264 | Medium | 4.4 | 2020-04-20 | In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows anyone to execute arbitrary action. The p… |
CVE-2020-11888 | Medium | 6.1 | 2020-04-20 | python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or el… |
CVE-2020-5569 | High | 8.4 | 2020-04-20 | An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY… |
CVE-2020-11930 | Medium | 6.1 | 2020-04-20 | The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or s… |
CVE-2020-11928 | Critical | 9.8 | 2020-04-20 | In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_… |
CVE-2020-11895 | Critical | 9.1 | 2020-04-19 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. |
CVE-2020-11894 | Critical | 9.1 | 2020-04-19 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. |
CVE-2020-11887 | Medium | 6.1 | 2020-04-17 | svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. |
CVE-2020-11886 | High | 8.1 | 2020-04-17 | OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm… |
CVE-2020-11885 | High | 7.2 | 2020-04-17 | WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network… |
CVE-2020-5737 | Medium | 5.4 | 2020-04-17 | Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser ses… |
CVE-2020-5733 | Medium | 6.1 | 2020-04-17 | In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts… |
CVE-2020-5732 | Medium | 6.1 | 2020-04-17 | In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts… |
CVE-2020-5731 | Medium | 6.1 | 2020-04-17 | In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting. |
CVE-2020-5730 | Medium | 6.1 | 2020-04-17 | In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting. |
CVE-2020-5729 | Medium | 6.1 | 2020-04-17 | In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is ab… |
CVE-2020-5728 | Medium | 6.1 | 2020-04-17 | OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient… |
CVE-2020-1751 | Medium | 5.1 | 2020-04-17 | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not p… |
CVE-2020-11883 | Medium | 5.3 | 2020-04-17 | In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception t… |
CVE-2020-0082 | High | 7.8 | 2020-04-17 | In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local e… |
CVE-2020-0081 | High | 7.8 | 2020-04-17 | In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional… |
CVE-2020-0080 | High | 7.8 | 2020-04-17 | In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification… |
CVE-2020-0079 | High | 7.8 | 2020-04-17 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no addi… |
CVE-2020-0078 | High | 7.8 | 2020-04-17 | In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2020-0077 | Medium | 4.4 | 2020-04-17 | In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |