2020 CVEs (page 44)
Page 44 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27248 | High | 7.8 | 2021-02-04 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is small… |
CVE-2020-27247 | High | 7.8 | 2021-02-04 | A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is small… |
CVE-2020-14247 | Medium | 6.5 | 2021-02-04 | HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. |
CVE-2020-14246 | High | 7.5 | 2021-02-04 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials. |
CVE-2020-14245 | Critical | 9.8 | 2021-02-04 | HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant… |
CVE-2020-13586 | High | 7.8 | 2021-02-04 | A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revi… |
CVE-2020-13580 | High | 7.8 | 2021-02-04 | An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application… |
CVE-2020-13579 | High | 7.8 | 2021-02-04 | An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specia… |
CVE-2020-9390 | Medium | 5.4 | 2021-02-03 | SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that… |
CVE-2020-9389 | Low | 3.7 | 2021-02-03 | A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious u… |
CVE-2020-9388 | Medium | 6.5 | 2021-02-03 | CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTM… |
CVE-2020-8589 | Low | 3.5 | 2021-02-03 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names o… |
CVE-2020-8588 | Low | 3.5 | 2021-02-03 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existen… |
CVE-2020-18724 | Medium | 5.4 | 2021-02-03 | Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes cod… |
CVE-2020-18723 | Medium | 5.4 | 2021-02-03 | Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwa… |
CVE-2020-8294 | Medium | 5.4 | 2021-02-03 | A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'jav… |
CVE-2020-25857 | High | 7.5 | 2021-02-03 | The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate t… |
CVE-2020-25856 | High | 8.1 | 2021-02-03 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the si… |
CVE-2020-25855 | High | 8.1 | 2021-02-03 | The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size p… |
CVE-2020-25854 | High | 8.1 | 2021-02-03 | The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the si… |
CVE-2020-25853 | High | 7.5 | 2021-02-03 | The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size par… |
CVE-2020-17523 | Critical | 9.8 | 2021-02-03 | Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass. |
CVE-2020-17516 | High | 7.5 | 2021-02-03 | Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allo… |
CVE-2020-35667 | High | 7.5 | 2021-02-03 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. |
CVE-2020-35482 | Medium | 5.4 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. |
CVE-2020-35481 | Critical | 9.8 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection. |
CVE-2020-2507 | Critical | 9.8 | 2021-02-03 | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run… |
CVE-2020-2506 | High | 7.3 | 2021-02-03 | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compr… |
CVE-2020-29582 | Medium | 5.3 | 2021-02-03 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and… |
CVE-2020-28895 | High | 7.3 | 2021-02-03 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual mem… |
CVE-2020-28653 | Critical | 9.8 | 2021-02-03 | Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servl… |
CVE-2020-28001 | Medium | 5.4 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. |
CVE-2020-27994 | Medium | 6.5 | 2021-02-03 | SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal. |
CVE-2020-27222 | High | 7.5 | 2021-02-03 | In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to… |
CVE-2020-25208 | Medium | 5.3 | 2021-02-03 | In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions. |
CVE-2020-29166 | High | 7.5 | 2021-02-03 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure. |
CVE-2020-29165 | Critical | 9.8 | 2021-02-03 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges. |
CVE-2020-29164 | Medium | 6.1 | 2021-02-03 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS). |
CVE-2020-29163 | High | 8.8 | 2021-02-03 | PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection. |
CVE-2020-28144 | Critical | 9.8 | 2021-02-03 | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Vers… |
CVE-2020-35152 | Medium | 4.5 | 2021-02-03 | Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges… |
CVE-2020-8672 | High | 7.8 | 2021-02-02 | Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated… |
CVE-2020-24490 | Medium | 6.5 | 2021-02-02 | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux ker… |
CVE-2020-8734 | Medium | 6.7 | 2021-02-02 | Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation… |
CVE-2020-4081 | Medium | 6.1 | 2021-02-02 | In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). |
CVE-2020-29662 | Medium | 5.3 | 2021-02-02 | In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path. |
CVE-2020-1910 | High | 7.8 | 2021-02-02 | A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read… |
CVE-2020-14255 | High | 7.5 | 2021-02-02 | HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect conta… |
CVE-2020-14221 | Medium | 4.9 | 2021-02-02 | HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. |
CVE-2020-7775 | Critical | 9.8 | 2021-02-02 | This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js. |
CVE-2020-28498 | Medium | 6.8 | 2021-02-02 | The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm t… |
CVE-2020-15097 | Critical | 9.1 | 2021-02-02 | loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a… |
CVE-2020-4934 | Medium | 4.3 | 2021-02-02 | IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request contai… |
CVE-2020-18568 | Critical | 9.8 | 2021-02-02 | The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution. |
CVE-2020-25506 | Critical | 9.8 | 2021-02-02 | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. |
CVE-2020-8101 | Medium | 6.9 | 2021-02-02 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell all… |
CVE-2020-28495 | High | 7.3 | 2021-02-02 | This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path… |
CVE-2020-28494 | High | 8.6 | 2021-02-02 | This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command… |
CVE-2020-24335 | High | 7.5 | 2021-02-02 | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory… |
CVE-2020-1896 | Critical | 9.8 | 2021-02-02 | A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/… |
CVE-2020-25036 | High | 8.8 | 2021-02-02 | UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights… |
CVE-2020-25035 | Medium | 6.7 | 2021-02-02 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE-2017-11322. |
CVE-2020-25037 | High | 8.2 | 2021-02-02 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command. |
CVE-2020-36231 | Medium | 4.3 | 2021-02-02 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure… |
CVE-2020-14192 | Medium | 4.3 | 2021-02-02 | Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen re… |
CVE-2020-28493 | Medium | 5.3 | 2021-02-01 | This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of mult… |
CVE-2020-21180 | Critical | 9.8 | 2021-02-01 | Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page. |
CVE-2020-21179 | Critical | 9.8 | 2021-02-01 | Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page. |
CVE-2020-21176 | Critical | 9.8 | 2021-02-01 | SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via… |
CVE-2020-20296 | Critical | 9.8 | 2021-02-01 | An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute… |
CVE-2020-20295 | Critical | 9.8 | 2021-02-01 | An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute ar… |
CVE-2020-20294 | Critical | 9.8 | 2021-02-01 | An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary comm… |
CVE-2020-20290 | High | 7.5 | 2021-02-01 | Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, trigg… |
CVE-2020-20289 | Critical | 9.8 | 2021-02-01 | Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability. |
CVE-2020-20287 | Critical | 9.8 | 2021-02-01 | Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code executio… |
CVE-2020-28426 | High | 7.3 | 2021-02-01 | All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId. |
CVE-2020-25594 | Medium | 5.3 | 2021-02-01 | HashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7. |
CVE-2020-13564 | Medium | 6.1 | 2021-02-01 | A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript e… |
CVE-2020-13563 | Medium | 6.1 | 2021-02-01 | A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript e… |
CVE-2020-13562 | Medium | 6.1 | 2021-02-01 | A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript e… |
CVE-2020-24271 | High | 8.8 | 2021-02-01 | A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/clo… |
CVE-2020-36109 | Critical | 9.8 | 2021-02-01 | ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause cod… |
CVE-2020-28194 | Critical | 9.8 | 2021-02-01 | Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact onl… |
CVE-2020-26547 | Critical | 9.8 | 2021-02-01 | Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allows a remote attacker (able to send stanza… |
CVE-2020-15836 | Critical | 9.8 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without p… |
CVE-2020-15835 | Critical | 9.8 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to… |
CVE-2020-15834 | High | 7.5 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenti… |
CVE-2020-15833 | Critical | 9.8 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to… |
CVE-2020-15832 | High | 7.5 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotel… |
CVE-2020-13860 | High | 7.5 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generat… |
CVE-2020-13859 | Critical | 9.8 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Confi… |
CVE-2020-13858 | Critical | 9.8 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mo… |
CVE-2020-13857 | High | 7.5 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET… |
CVE-2020-13856 | High | 7.5 | 2021-02-01 | An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive… |
CVE-2020-17380 | Medium | 6.3 | 2021-01-30 | A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via… |
CVE-2020-15690 | Critical | 9.8 | 2021-01-30 | In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. |
CVE-2020-14418 | High | 7.0 | 2021-01-30 | A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redi… |
CVE-2020-15568 | Critical | 9.8 | 2021-01-30 | TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in i… |
CVE-2020-29557 | Critical | 9.8 | 2021-01-29 | An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-au… |
CVE-2020-24670 | Medium | 5.4 | 2021-01-29 | The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote… |