2020 CVEs (page 36)
Page 36 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36307 | Medium | 6.1 | 2021-04-06 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. |
CVE-2020-36306 | Medium | 6.1 | 2021-04-06 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. |
CVE-2020-17453 | Medium | 6.1 | 2021-04-05 | WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. |
CVE-2020-19596 | Critical | 9.8 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. |
CVE-2020-19595 | High | 7.5 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. |
CVE-2020-4997 | Medium | 5.4 | 2021-04-05 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2020-4792 | Medium | 5.4 | 2021-04-05 | IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… |
CVE-2020-27600 | Critical | 9.8 | 2021-04-02 | HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via shell metac… |
CVE-2020-21590 | Medium | 4.3 | 2021-04-02 | Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter. |
CVE-2020-21588 | Medium | 5.5 | 2021-04-02 | Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox. |
CVE-2020-21585 | Critical | 9.8 | 2021-04-02 | Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. |
CVE-2020-11924 | Medium | 5.5 | 2021-04-02 | An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for… |
CVE-2020-11923 | Medium | 5.5 | 2021-04-02 | An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged. |
CVE-2020-9995 | Medium | 6.1 | 2021-04-02 | An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a malici… |
CVE-2020-9978 | Medium | 4.5 | 2021-04-02 | This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-00… |
CVE-2020-9975 | High | 7.8 | 2021-04-02 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Upda… |
CVE-2020-9971 | High | 7.8 | 2021-04-02 | A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A maliciou… |
CVE-2020-9967 | High | 7.8 | 2021-04-02 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Se… |
CVE-2020-9962 | High | 7.8 | 2021-04-02 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020… |
CVE-2020-9960 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update… |
CVE-2020-9956 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update… |
CVE-2020-9955 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Su… |
CVE-2020-9930 | High | 7.1 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Up… |
CVE-2020-9926 | High | 7.8 | 2021-04-02 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for W… |
CVE-2020-29639 | Medium | 5.5 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font may… |
CVE-2020-29633 | High | 8.8 | 2021-04-02 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Up… |
CVE-2020-29625 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. P… |
CVE-2020-29624 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2… |
CVE-2020-29623 | Low | 3.3 | 2021-04-02 | "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Sec… |
CVE-2020-29621 | Medium | 5.5 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A… |
CVE-2020-29620 | High | 7.8 | 2021-04-02 | This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Moj… |
CVE-2020-29619 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Se… |
CVE-2020-29618 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Se… |
CVE-2020-29617 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Se… |
CVE-2020-29616 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-29615 | Medium | 5.5 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina… |
CVE-2020-29614 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, m… |
CVE-2020-29613 | Medium | 5.5 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application installation prompt may… |
CVE-2020-29612 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2020-29611 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catali… |
CVE-2020-29610 | Medium | 5.5 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina… |
CVE-2020-29608 | Medium | 5.5 | 2021-04-02 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Updat… |
CVE-2020-27952 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27951 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution… |
CVE-2020-27949 | Medium | 5.5 | 2021-04-02 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Se… |
CVE-2020-27948 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Cata… |
CVE-2020-27947 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27946 | Medium | 5.5 | 2021-04-02 | An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001… |
CVE-2020-27945 | High | 7.8 | 2021-04-02 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update… |
CVE-2020-27944 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2… |
CVE-2020-27943 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in tvOS 14.3, i… |
CVE-2020-27941 | High | 7.8 | 2021-04-02 | A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mo… |
CVE-2020-27939 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. P… |
CVE-2020-27938 | High | 7.8 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-… |
CVE-2020-27937 | Medium | 5.5 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-… |
CVE-2020-27936 | High | 7.1 | 2021-04-02 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO… |
CVE-2020-27935 | Medium | 6.3 | 2021-04-02 | Multiple issues were addressed with improved logic. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A sandboxed… |
CVE-2020-27933 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8… |
CVE-2020-27931 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and… |
CVE-2020-27924 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upda… |
CVE-2020-27923 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27922 | High | 7.8 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-… |
CVE-2020-27921 | High | 7.0 | 2021-04-02 | A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020… |
CVE-2020-27920 | High | 8.8 | 2021-04-02 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Up… |
CVE-2020-27919 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27915 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27914 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27908 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upda… |
CVE-2020-27907 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security U… |
CVE-2020-27901 | Medium | 6.3 | 2021-04-02 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007… |
CVE-2020-27899 | High | 7.8 | 2021-04-02 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS… |
CVE-2020-27897 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2020-27893 | Medium | 6.5 | 2021-04-02 | An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sh… |
CVE-2020-10015 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2020-10008 | Medium | 5.5 | 2021-04-02 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able t… |
CVE-2020-10001 | Medium | 5.5 | 2021-04-02 | An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security U… |
CVE-2020-11925 | High | 8.8 | 2021-04-02 | An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the device is based on a username and password. The root credenti… |
CVE-2020-11922 | Medium | 4.3 | 2021-04-02 | An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent en… |
CVE-2020-19619 | Medium | 5.4 | 2021-04-01 | Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile. |
CVE-2020-19618 | Medium | 5.4 | 2021-04-01 | Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing. |
CVE-2020-19617 | Medium | 5.4 | 2021-04-01 | Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile. |
CVE-2020-19616 | Medium | 5.4 | 2021-04-01 | Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing. |
CVE-2020-19613 | High | 7.5 | 2021-04-01 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. |
CVE-2020-9149 | Medium | 5.5 | 2021-04-01 | An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify… |
CVE-2020-9148 | Medium | 5.5 | 2021-04-01 | An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete us… |
CVE-2020-9147 | High | 7.8 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully construct… |
CVE-2020-9146 | Medium | 5.5 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakag… |
CVE-2020-36286 | Medium | 5.3 | 2021-04-01 | The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 befor… |
CVE-2020-36238 | Medium | 5.3 | 2021-04-01 | The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 befor… |
CVE-2020-24550 | Medium | 6.1 | 2021-03-31 | An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirect parameter in a cr… |
CVE-2020-35308 | Critical | 9.8 | 2021-03-31 | CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code. |
CVE-2020-28173 | High | 7.2 | 2021-03-31 | Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using… |
CVE-2020-28172 | Critical | 9.8 | 2021-03-31 | A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_web… |
CVE-2020-24995 | High | 7.8 | 2021-03-30 | Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). |
CVE-2020-24391 | Critical | 9.8 | 2021-03-30 | mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769. |
CVE-2020-4944 | Medium | 5.5 | 2021-03-30 | IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual e… |
CVE-2020-4884 | Medium | 5.5 | 2021-03-30 | IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 1909… |
CVE-2020-4848 | Medium | 5.4 | 2021-03-30 | IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should n… |
CVE-2020-15075 | High | 7.1 | 2021-03-30 | OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp. |
CVE-2020-20545 | Medium | 5.4 | 2021-03-30 | Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'. |