2020 CVEs (page 33)
Page 33 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27232 | High | 8.8 | 2021-05-10 | An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL… |
CVE-2020-18102 | Medium | 6.1 | 2021-05-10 | Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the compone… |
CVE-2020-28588 | Medium | 5.5 | 2021-05-10 | An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has… |
CVE-2020-27231 | High | 8.8 | 2021-05-10 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict parameter in ‘‘pa… |
CVE-2020-27230 | High | 8.8 | 2021-05-10 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findSector parameter in ‘‘pati… |
CVE-2020-27229 | High | 8.8 | 2021-05-10 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findPersonID parameter in ‘‘pa… |
CVE-2020-27226 | High | 8.8 | 2021-05-10 | An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection… |
CVE-2020-19199 | High | 8.8 | 2021-05-10 | A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitra… |
CVE-2020-13529 | Medium | 6.1 | 2021-05-10 | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to… |
CVE-2020-22809 | High | 7.8 | 2021-05-10 | In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. |
CVE-2020-4901 | Medium | 6.5 | 2021-05-07 | IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of servic… |
CVE-2020-14009 | Medium | 6.3 | 2021-05-07 | Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious att… |
CVE-2020-36128 | High | 8.2 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (called X-Term… |
CVE-2020-36127 | Medium | 6.5 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through the PUK signature functionality, an adm… |
CVE-2020-36126 | High | 8.1 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTORE marketpl… |
CVE-2020-36125 | High | 7.1 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypa… |
CVE-2020-36124 | Medium | 6.5 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authenticated attacker can compromise the privat… |
CVE-2020-11295 | Medium | 6.8 | 2021-05-07 | Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2020-11294 | Medium | 5.9 | 2021-05-07 | Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2020-11293 | Medium | 5.1 | 2021-05-07 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snap… |
CVE-2020-11289 | High | 7.8 | 2021-05-07 | Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2020-11288 | High | 7.8 | 2021-05-07 | Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2020-11285 | High | 8.2 | 2021-05-07 | Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2020-11284 | High | 8.4 | 2021-05-07 | Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input f… |
CVE-2020-11279 | High | 7.5 | 2021-05-07 | Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2020-11274 | High | 7.5 | 2021-05-07 | Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2020-11273 | High | 7.5 | 2021-05-07 | Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info… |
CVE-2020-11268 | High | 7.5 | 2021-05-07 | Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile |
CVE-2020-11254 | Medium | 6.2 | 2021-05-07 | Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute… |
CVE-2020-29445 | Medium | 4.3 | 2021-05-07 | Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind ser… |
CVE-2020-29444 | Medium | 5.4 | 2021-05-07 | Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnera… |
CVE-2020-23264 | High | 8.8 | 2021-05-06 | Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators. |
CVE-2020-23263 | Medium | 6.1 | 2021-05-06 | Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigation_title"… |
CVE-2020-28198 | High | 7.0 | 2021-05-06 | The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack… |
CVE-2020-18890 | Critical | 9.8 | 2021-05-06 | Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.ph… |
CVE-2020-18888 | High | 7.5 | 2021-05-06 | Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php. |
CVE-2020-18889 | Medium | 6.5 | 2021-05-06 | Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php. |
CVE-2020-35519 | High | 7.8 | 2021-05-06 | An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a loca… |
CVE-2020-28026 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Cer… |
CVE-2020-28025 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus… |
CVE-2020-28024 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only in… |
CVE-2020-28023 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client. |
CVE-2020-28022 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAI… |
CVE-2020-28021 | High | 8.8 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which… |
CVE-2020-28020 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishand… |
CVE-2020-28019 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain g… |
CVE-2020-28018 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL. |
CVE-2020-28017 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote expl… |
CVE-2020-28016 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase. |
CVE-2020-28015 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have… |
CVE-2020-28014 | Medium | 6.1 | 2021-05-06 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-ow… |
CVE-2020-28013 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any us… |
CVE-2020-28012 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec fl… |
CVE-2020-28011 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. |
CVE-2020-28010 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that… |
CVE-2020-28009 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a ce… |
CVE-2020-28008 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker… |
CVE-2020-28007 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or… |
CVE-2020-23128 | Medium | 4.9 | 2021-05-06 | Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege to create a new user then use the edit u… |
CVE-2020-23127 | High | 8.8 | 2021-05-06 | Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user. |
CVE-2020-19114 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary c… |
CVE-2020-19113 | Critical | 9.8 | 2021-05-06 | Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. |
CVE-2020-19112 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary… |
CVE-2020-19111 | Critical | 9.8 | 2021-05-06 | Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtai… |
CVE-2020-19110 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitra… |
CVE-2020-19109 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary c… |
CVE-2020-19108 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code. |
CVE-2020-19107 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
CVE-2020-5013 | High | 8.1 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulne… |
CVE-2020-4993 | Medium | 4.9 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IB… |
CVE-2020-4979 | Critical | 9.8 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may… |
CVE-2020-4932 | High | 7.8 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outboun… |
CVE-2020-4929 | Medium | 5.4 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri… |
CVE-2020-4883 | Medium | 6.5 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force ID… |
CVE-2020-13665 | Critical | 9.8 | 2021-05-05 | Access bypass vulnerability in Drupal Core allows JSON:API when JSON:API is in read/write mode. Only sites that have the read_only set to FALSE under jsonapi.s… |
CVE-2020-13664 | High | 8.8 | 2021-05-05 | Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances. An attacker could trick an administrator into visiting a malicious site… |
CVE-2020-13662 | Medium | 6.1 | 2021-05-05 | Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary externa… |
CVE-2020-13666 | Medium | 6.1 | 2021-05-05 | Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Dr… |
CVE-2020-36334 | High | 8.8 | 2021-05-05 | themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. |
CVE-2020-36333 | Critical | 9.1 | 2021-05-05 | themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. |
CVE-2020-22428 | Medium | 4.8 | 2021-05-05 | SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload. |
CVE-2020-4987 | Medium | 5.4 | 2021-05-04 | The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnera… |
CVE-2020-21999 | High | 8.8 | 2021-05-04 | iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploite… |
CVE-2020-27518 | High | 7.8 | 2021-05-04 | All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low pri… |
CVE-2020-23083 | Critical | 9.8 | 2021-05-03 | Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the comp… |
CVE-2020-23015 | Medium | 6.1 | 2021-05-03 | An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any webs… |
CVE-2020-35758 | Critical | 9.8 | 2021-05-03 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly rest… |
CVE-2020-35757 | Critical | 9.8 | 2021-05-03 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functional… |
CVE-2020-35756 | High | 7.5 | 2021-05-03 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Password Information Leak. The luci_service da… |
CVE-2020-35755 | High | 7.5 | 2021-05-03 | An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Information Leak. The luci_service deamon… |
CVE-2020-28945 | Medium | 6.1 | 2021-05-03 | OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as  suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attac… |
CVE-2020-20218 | Medium | 6.5 | 2021-05-03 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker… |
CVE-2020-28944 | High | 7.5 | 2021-04-30 | OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data. |
CVE-2020-28943 | Medium | 6.5 | 2021-04-30 | OX App Suite 7.10.4 and earlier allows SSRF via a snippet. |
CVE-2020-18084 | Medium | 6.1 | 2021-04-30 | Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to… |
CVE-2020-7731 | High | 7.5 | 2021-04-30 | This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML sign… |
CVE-2020-4039 | High | 8.6 | 2021-04-30 | SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient inp… |
CVE-2020-15153 | High | 8.2 | 2021-04-30 | Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workarou… |
CVE-2020-27519 | High | 7.8 | 2021-04-30 | Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn confi… |