2020 CVEs (page 41)
Page 41 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7849 | High | 8.0 | 2021-02-17 | A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to… |
CVE-2020-7848 | High | 8.0 | 2021-02-17 | The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can se… |
CVE-2020-24505 | Medium | 4.4 | 2021-02-17 | Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially… |
CVE-2020-24504 | Medium | 5.5 | 2021-02-17 | Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially… |
CVE-2020-24503 | Medium | 5.5 | 2021-02-17 | Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable… |
CVE-2020-24502 | Medium | 5.5 | 2021-02-17 | Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an… |
CVE-2020-24501 | Medium | 6.5 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial o… |
CVE-2020-24500 | Medium | 4.4 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of se… |
CVE-2020-24498 | Medium | 4.4 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of serv… |
CVE-2020-24497 | Medium | 4.4 | 2021-02-17 | Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable de… |
CVE-2020-24496 | Medium | 4.4 | 2021-02-17 | Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable deni… |
CVE-2020-24495 | Medium | 4.4 | 2021-02-17 | Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially e… |
CVE-2020-24494 | Medium | 4.4 | 2021-02-17 | Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable de… |
CVE-2020-24493 | Medium | 4.4 | 2021-02-17 | Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged user to potentially e… |
CVE-2020-24492 | Medium | 4.4 | 2021-02-17 | Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a de… |
CVE-2020-24491 | Medium | 4.4 | 2021-02-17 | Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privileged user to potent… |
CVE-2020-24485 | High | 7.8 | 2021-02-17 | Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalatio… |
CVE-2020-24482 | High | 7.5 | 2021-02-17 | Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticated user to potentially enable denial of… |
CVE-2020-24481 | High | 7.8 | 2021-02-17 | Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalatio… |
CVE-2020-24480 | Medium | 4.4 | 2021-02-17 | Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access. |
CVE-2020-24462 | High | 7.8 | 2021-02-17 | Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.8336 may allow an a… |
CVE-2020-24458 | Medium | 5.2 | 2021-02-17 | Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privileged user to potentially enable informat… |
CVE-2020-24453 | High | 7.8 | 2021-02-17 | Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of privilege via local… |
CVE-2020-24452 | Medium | 5.5 | 2021-02-17 | Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potentially enable a denial of service via loca… |
CVE-2020-24451 | High | 7.3 | 2021-02-17 | Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows* before version 1.00.00.3506 may allow an authenticated user to… |
CVE-2020-24450 | High | 7.8 | 2021-02-17 | Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5144 may allow an authenticated user to… |
CVE-2020-24448 | Medium | 5.5 | 2021-02-17 | Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via l… |
CVE-2020-12386 | Medium | 5.5 | 2021-02-17 | Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via… |
CVE-2020-12385 | High | 7.8 | 2021-02-17 | Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable escalation of privi… |
CVE-2020-12384 | High | 7.8 | 2021-02-17 | Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enable an escalation of… |
CVE-2020-12380 | High | 7.8 | 2021-02-17 | Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user… |
CVE-2020-12377 | High | 7.8 | 2021-02-17 | Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenti… |
CVE-2020-12376 | Medium | 5.5 | 2021-02-17 | Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user… |
CVE-2020-12375 | Medium | 6.7 | 2021-02-17 | Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to po… |
CVE-2020-12373 | Medium | 6.7 | 2021-02-17 | Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of servi… |
CVE-2020-12372 | Medium | 5.5 | 2021-02-17 | Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service vi… |
CVE-2020-12371 | Medium | 5.5 | 2021-02-17 | Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local… |
CVE-2020-12370 | Medium | 5.5 | 2021-02-17 | Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of ser… |
CVE-2020-12369 | High | 7.8 | 2021-02-17 | Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalation of privilege vi… |
CVE-2020-12368 | High | 7.8 | 2021-02-17 | Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an escalation of privilege v… |
CVE-2020-12367 | High | 7.8 | 2021-02-17 | Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escalation of privilege v… |
CVE-2020-12366 | High | 7.8 | 2021-02-17 | Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation o… |
CVE-2020-12364 | Medium | 5.5 | 2021-02-17 | Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a pri… |
CVE-2020-12363 | Medium | 5.5 | 2021-02-17 | Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileg… |
CVE-2020-12362 | High | 7.8 | 2021-02-17 | Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a… |
CVE-2020-12361 | Medium | 5.5 | 2021-02-17 | Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local… |
CVE-2020-12339 | High | 8.8 | 2021-02-17 | Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potenti… |
CVE-2020-0544 | High | 7.8 | 2021-02-17 | Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an authenticated user… |
CVE-2020-0525 | Medium | 4.4 | 2021-02-17 | Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to pot… |
CVE-2020-0524 | Medium | 5.5 | 2021-02-17 | Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticate… |
CVE-2020-0523 | Medium | 4.4 | 2021-02-17 | Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privil… |
CVE-2020-0522 | Medium | 4.4 | 2021-02-17 | Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to… |
CVE-2020-0521 | High | 7.8 | 2021-02-17 | Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escal… |
CVE-2020-0518 | Medium | 5.5 | 2021-02-17 | Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated user to potentially… |
CVE-2020-2502 | Medium | 6.1 | 2021-02-17 | This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the… |
CVE-2020-2501 | Critical | 9.8 | 2021-02-17 | A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows… |
CVE-2020-29457 | Medium | 4.4 | 2021-02-16 | A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection. |
CVE-2020-28918 | Medium | 5.3 | 2021-02-16 | DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produc… |
CVE-2020-11635 | High | 7.8 | 2021-02-16 | The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or… |
CVE-2020-35570 | Medium | 5.3 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is a… |
CVE-2020-35569 | Medium | 6.1 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page. |
CVE-2020-35568 | Medium | 4.3 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete f… |
CVE-2020-35567 | High | 7.8 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this passw… |
CVE-2020-35566 | Medium | 5.3 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can… |
CVE-2020-35565 | Critical | 9.8 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default. |
CVE-2020-35564 | High | 7.5 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user i… |
CVE-2020-35563 | Medium | 5.4 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an incomplete XSS filter allowing an attacker to inject crafte… |
CVE-2020-35561 | Medium | 5.3 | 2021-02-16 | An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF i… |
CVE-2020-35560 | Medium | 6.1 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open redirect in the redirect.php. |
CVE-2020-35559 | Medium | 4.3 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to us… |
CVE-2020-35558 | High | 7.5 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the M… |
CVE-2020-35557 | Medium | 6.5 | 2021-02-16 | An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see… |
CVE-2020-29027 | Medium | 5.4 | 2021-02-16 | Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager… |
CVE-2020-29025 | Medium | 5.4 | 2021-02-16 | A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause J… |
CVE-2020-29024 | Medium | 5.3 | 2021-02-16 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access… |
CVE-2020-29023 | Low | 3.5 | 2021-02-16 | Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may… |
CVE-2020-29022 | Medium | 5.3 | 2021-02-16 | Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affect… |
CVE-2020-25340 | Medium | 5.5 | 2021-02-16 | An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being u… |
CVE-2020-24841 | Critical | 9.8 | 2021-02-16 | PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application… |
CVE-2020-35734 | High | 7.2 | 2021-02-15 | Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab… |
CVE-2020-29143 | High | 7.2 | 2021-02-15 | A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL c… |
CVE-2020-29140 | High | 7.2 | 2021-02-15 | A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrar… |
CVE-2020-29139 | High | 7.2 | 2021-02-15 | A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated atta… |
CVE-2020-29142 | High | 7.2 | 2021-02-15 | A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary… |
CVE-2020-28337 | High | 7.2 | 2021-02-15 | A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backu… |
CVE-2020-24899 | High | 8.8 | 2021-02-15 | Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query. |
CVE-2020-22427 | High | 7.2 | 2021-02-15 | NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NO… |
CVE-2020-22425 | High | 8.8 | 2021-02-15 | Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command… |
CVE-2020-35512 | High | 7.8 | 2021-02-15 | A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 whe… |
CVE-2020-29031 | High | 7.1 | 2021-02-15 | An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any u… |
CVE-2020-29026 | Critical | 9.0 | 2021-02-15 | A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions… |
CVE-2020-4956 | Medium | 4.8 | 2021-02-15 | IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped… |
CVE-2020-4955 | High | 8.0 | 2021-02-15 | IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validatio… |
CVE-2020-4954 | Medium | 5.4 | 2021-02-15 | IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation… |
CVE-2020-35775 | Critical | 9.8 | 2021-02-15 | CITSmart before 9.1.2.23 allows LDAP Injection. |
CVE-2020-28500 | Medium | 5.3 | 2021-02-15 | Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions. |
CVE-2020-7071 | Medium | 5.3 | 2021-02-15 | In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accep… |
CVE-2020-29451 | Medium | 4.3 | 2021-02-15 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the… |
CVE-2020-36237 | Medium | 5.3 | 2021-02-15 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vu… |
CVE-2020-36236 | Medium | 6.1 | 2021-02-15 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulne… |