2020 CVEs (page 194)
Page 194 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6838 | Critical | 9.8 | 2020-01-11 | In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c. |
CVE-2020-6836 | Critical | 9.8 | 2020-01-11 | grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection. The package fails to sanitize values… |
CVE-2020-6377 | High | 8.8 | 2020-01-10 | Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6835 | Critical | 9.8 | 2020-01-10 | An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking. |
CVE-2020-6162 | Critical | 9.1 | 2020-01-10 | An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at star… |
CVE-2020-1767 | Low | 3.5 | 2020-01-10 | Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For… |
CVE-2020-1766 | Low | 2.0 | 2020-01-10 | Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript fro… |
CVE-2020-1765 | Low | 3.5 | 2020-01-10 | An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce an… |
CVE-2020-6758 | Medium | 6.1 | 2020-01-09 | A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows remote attackers to in… |
CVE-2020-6757 | High | 8.8 | 2020-01-09 | contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers to remotely execute code via the name pa… |
CVE-2020-6756 | Critical | 9.8 | 2020-01-09 | languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to remotely execute code via the lang parame… |
CVE-2020-5504 | High | 8.8 | 2020-01-09 | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own… |
CVE-2020-6750 | Medium | 5.9 | 2020-01-09 | GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do… |
CVE-2020-6168 | High | 7.6 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable mainten… |
CVE-2020-6166 | Medium | 5.4 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change… |
CVE-2020-6167 | High | 8.8 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify severa… |
CVE-2020-1925 | High | 7.5 | 2020-01-09 | Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE requ… |
CVE-2020-1810 | Medium | 5.3 | 2020-01-09 | There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been… |
CVE-2020-1786 | Medium | 4.6 | 2020-01-09 | HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently v… |
CVE-2020-1826 | Medium | 4.4 | 2020-01-09 | Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerability. Due to a module using weak encrypt… |
CVE-2020-1787 | Medium | 6.6 | 2020-01-09 | HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certa… |
CVE-2020-5308 | Medium | 6.1 | 2020-01-09 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the Com… |
CVE-2020-6632 | Medium | 6.1 | 2020-01-09 | In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/temp… |
CVE-2020-6631 | Medium | 5.5 | 2020-01-09 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_process_pmt() in media_tools/m2ts_mux.c. |
CVE-2020-6630 | Medium | 5.5 | 2020-01-09 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_data_size() in isomedia/isom_read.c. |
CVE-2020-6629 | Medium | 6.5 | 2020-01-09 | Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c. |
CVE-2020-6628 | High | 8.8 | 2020-01-09 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. |
CVE-2020-5205 | Medium | 6.5 | 2020-01-09 | In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is use… |
CVE-2020-6625 | High | 7.1 | 2020-01-09 | jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. |
CVE-2020-6624 | High | 7.1 | 2020-01-09 | jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. |
CVE-2020-6623 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. |
CVE-2020-6622 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. |
CVE-2020-6621 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. |
CVE-2020-6620 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. |
CVE-2020-6619 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. |
CVE-2020-6618 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. |
CVE-2020-6617 | High | 8.8 | 2020-01-08 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. |
CVE-2020-6615 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl). |
CVE-2020-6614 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. |
CVE-2020-6613 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. |
CVE-2020-6612 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. |
CVE-2020-6611 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. |
CVE-2020-6610 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. |
CVE-2020-6609 | High | 8.8 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. |
CVE-2020-6583 | Medium | 6.1 | 2020-01-08 | BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve… |
CVE-2020-0008 | Medium | 4.7 | 2020-01-08 | In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local inform… |
CVE-2020-0007 | Medium | 5.5 | 2020-01-08 | In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disc… |
CVE-2020-0006 | Medium | 6.5 | 2020-01-08 | In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to rem… |
CVE-2020-0004 | Medium | 5.5 | 2020-01-08 | In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial o… |
CVE-2020-0003 | Medium | 6.7 | 2020-01-08 | In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local esca… |
CVE-2020-0002 | High | 8.8 | 2020-01-08 | In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no addit… |
CVE-2020-0001 | High | 7.8 | 2020-01-08 | In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no addi… |
CVE-2020-5511 | High | 8.8 | 2020-01-08 | PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page. |
CVE-2020-5510 | Critical | 9.8 | 2020-01-08 | PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. |
CVE-2020-5183 | High | 7.5 | 2020-01-08 | FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. This memory corrupt… |
CVE-2020-0009 | Medium | 5.5 | 2020-01-08 | In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of priv… |
CVE-2020-6170 | Critical | 9.8 | 2020-01-08 | An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML sourc… |
CVE-2020-6163 | Medium | 6.1 | 2020-01-08 | The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templat… |
CVE-2020-5841 | Critical | 9.8 | 2020-01-07 | An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication. |
CVE-2020-5842 | Medium | 6.1 | 2020-01-07 | Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed o… |
CVE-2020-5307 | Critical | 9.8 | 2020-01-07 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and Categ… |
CVE-2020-5393 | Medium | 6.1 | 2020-01-07 | In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS. |
CVE-2020-5843 | Medium | 4.8 | 2020-01-07 | Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. |
CVE-2020-5846 | High | 8.8 | 2020-01-06 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-… |
CVE-2020-5513 | Medium | 6.8 | 2020-01-06 | Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. |
CVE-2020-5512 | Medium | 6.8 | 2020-01-06 | Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. |
CVE-2020-5204 | Medium | 6.5 | 2020-01-06 | In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sp… |
CVE-2020-5515 | High | 7.2 | 2020-01-06 | Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. |
CVE-2020-5514 | Critical | 9.1 | 2020-01-06 | Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI. |
CVE-2020-5840 | High | 7.5 | 2020-01-06 | An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name o… |
CVE-2020-5519 | Critical | 9.8 | 2020-01-06 | The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen. |
CVE-2020-5192 | High | 8.8 | 2020-01-06 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user in… |
CVE-2020-5191 | Medium | 6.1 | 2020-01-06 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities. |
CVE-2020-5306 | Medium | 4.8 | 2020-01-05 | Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. |
CVE-2020-5305 | Medium | 4.8 | 2020-01-05 | Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen. |
CVE-2020-5499 | Critical | 9.8 | 2020-01-04 | Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same. |
CVE-2020-5497 | Medium | 6.1 | 2020-01-04 | The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is re… |
CVE-2020-5496 | High | 8.8 | 2020-01-03 | FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c. |
CVE-2020-5395 | High | 8.8 | 2020-01-03 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. |
CVE-2020-1871 | High | 8.2 | 2020-01-03 | USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper cred… |
CVE-2020-1785 | Medium | 5.5 | 2020-01-03 | Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module durin… |
CVE-2020-5313 | High | 7.1 | 2020-01-03 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. |
CVE-2020-5312 | Critical | 9.8 | 2020-01-03 | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. |
CVE-2020-5311 | Critical | 9.8 | 2020-01-03 | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. |
CVE-2020-5310 | High | 8.8 | 2020-01-03 | libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. |
CVE-2020-5179 | High | 7.2 | 2020-01-02 | Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page an… |