2020 CVEs (page 52)
Page 52 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35962 | High | 7.5 | 2021-01-03 | The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swa… |
CVE-2020-28841 | Medium | 5.5 | 2021-01-03 | MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \\.\MyDrivers0_0_1. |
CVE-2020-35952 | Medium | 6.5 | 2021-01-03 | login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect pass… |
CVE-2020-28852 | High | 7.5 | 2021-01-02 | In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is su… |
CVE-2020-28851 | High | 7.5 | 2021-01-02 | In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to b… |
CVE-2020-35717 | Critical | 9.0 | 2021-01-01 | zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true). |
CVE-2020-35391 | Critical | 9.6 | 2021-01-01 | Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-… |
CVE-2020-35951 | Critical | 9.9 | 2021-01-01 | An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file… |
CVE-2020-35950 | Critical | 9.8 | 2021-01-01 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint). |
CVE-2020-35949 | Critical | 10.0 | 2021-01-01 | An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary… |
CVE-2020-35948 | Critical | 9.9 | 2021-01-01 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary f… |
CVE-2020-35947 | High | 7.4 | 2021-01-01 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these ac… |
CVE-2020-35946 | Medium | 5.4 | 2021-01-01 | An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input… |
CVE-2020-35945 | Critical | 9.9 | 2021-01-01 | An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-leve… |
CVE-2020-35944 | High | 8.8 | 2021-01-01 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS. |
CVE-2020-35939 | High | 7.5 | 2021-01-01 | PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP obje… |
CVE-2020-35938 | High | 7.5 | 2021-01-01 | PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects d… |
CVE-2020-35937 | High | 7.5 | 2021-01-01 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layou… |
CVE-2020-35936 | High | 7.5 | 2021-01-01 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts in… |
CVE-2020-35935 | High | 7.5 | 2021-01-01 | The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple… |
CVE-2020-35934 | Medium | 4.3 | 2021-01-01 | The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/… |
CVE-2020-35933 | Medium | 6.5 | 2021-01-01 | A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victi… |
CVE-2020-35932 | High | 7.5 | 2021-01-01 | Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers… |
CVE-2020-35931 | High | 7.8 | 2020-12-31 | An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS… |
CVE-2020-26165 | High | 8.8 | 2020-12-31 | qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/actions/actions.class.php because unseri… |
CVE-2020-35930 | Medium | 5.4 | 2020-12-31 | Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI. |
CVE-2020-25799 | Medium | 5.4 | 2020-12-31 | LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administr… |
CVE-2020-25797 | Medium | 5.4 | 2020-12-31 | LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant bein… |
CVE-2020-11835 | Medium | 5.5 | 2020-12-31 | In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_mode_write in proc_… |
CVE-2020-11834 | Medium | 5.5 | 2020-12-31 | In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write does not check the… |
CVE-2020-11833 | Medium | 5.5 | 2020-12-31 | In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write does not check the p… |
CVE-2020-11832 | Medium | 5.5 | 2020-12-31 | In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c have not checked th… |
CVE-2020-35897 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race. |
CVE-2020-35896 | High | 7.5 | 2020-12-31 | An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack. |
CVE-2020-35895 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion. |
CVE-2020-35894 | High | 7.5 | 2020-12-31 | An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur. |
CVE-2020-35893 | High | 7.5 | 2020-12-31 | An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized me… |
CVE-2020-35892 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read. |
CVE-2020-35891 | High | 7.5 | 2020-12-31 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free. |
CVE-2020-35890 | High | 7.5 | 2020-12-31 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity. |
CVE-2020-35889 | High | 8.1 | 2020-12-31 | An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. |
CVE-2020-35888 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template. |
CVE-2020-35887 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut. |
CVE-2020-35886 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race. |
CVE-2020-35885 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation. |
CVE-2020-35884 | Medium | 6.5 | 2020-12-31 | An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header. |
CVE-2020-35883 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at… |
CVE-2020-35882 | High | 8.1 | 2020-12-31 | An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly ca… |
CVE-2020-35881 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption… |
CVE-2020-35880 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation. |
CVE-2020-35879 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rulinalg crate through 2020-02-11 for Rust. There are incorrect lifetime-boundary definitions for RowMut::raw_slice and RowMut… |
CVE-2020-35878 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory. |
CVE-2020-35877 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of out-of-bounds access. |
CVE-2020-35876 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-a… |
CVE-2020-35875 | High | 7.5 | 2020-12-31 | An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly. |
CVE-2020-35874 | High | 8.1 | 2020-12-31 | An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. |
CVE-2020-35873 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free. |
CVE-2020-35872 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type. |
CVE-2020-35871 | High | 8.1 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race. |
CVE-2020-35870 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free. |
CVE-2020-35869 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings. |
CVE-2020-35868 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification. |
CVE-2020-35867 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module. |
CVE-2020-35866 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor. |
CVE-2020-35865 | High | 7.5 | 2020-12-31 | An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior. |
CVE-2020-35864 | High | 7.5 | 2020-12-31 | An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. |
CVE-2020-35863 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations wit… |
CVE-2020-35862 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. |
CVE-2020-35861 | High | 7.5 | 2020-12-31 | An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cr… |
CVE-2020-35860 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code. |
CVE-2020-35859 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sen… |
CVE-2020-35858 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or… |
CVE-2020-35857 | High | 7.5 | 2020-12-31 | An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption. |
CVE-2020-35928 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/… |
CVE-2020-35927 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types. |
CVE-2020-35926 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer t… |
CVE-2020-35925 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type. |
CVE-2020-35924 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex<T> allows cross-thread sending of a non-Send type. |
CVE-2020-35923 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN. |
CVE-2020-35922 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the mio crate before 0.7.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation. |
CVE-2020-35921 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation. |
CVE-2020-35920 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation. |
CVE-2020-35919 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation. |
CVE-2020-35918 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the branca crate before 0.10.0 for Rust. Decoding tokens (with invalid base62 data) can panic. |
CVE-2020-35917 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>. |
CVE-2020-35916 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always co… |
CVE-2020-35915 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types. |
CVE-2020-35914 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness. |
CVE-2020-35913 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness. |
CVE-2020-35912 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness. |
CVE-2020-35911 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness. |
CVE-2020-35910 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness. |
CVE-2020-35909 | High | 7.5 | 2020-12-31 | An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server. |
CVE-2020-35908 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled. |
CVE-2020-35907 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference. |
CVE-2020-35906 | High | 7.8 | 2020-12-31 | An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation. |
CVE-2020-35905 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code). |
CVE-2020-35904 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocatio… |
CVE-2020-35903 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question. |
CVE-2020-35902 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. |