2020 CVEs (page 54)
Page 54 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35796 | High | 8.8 | 2020-12-30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 befo… |
CVE-2020-35795 | Critical | 9.8 | 2020-12-30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 b… |
CVE-2020-35794 | High | 8.4 | 2020-12-30 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBR750 before… |
CVE-2020-35793 | Medium | 6.1 | 2020-12-30 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.46, R7800 before 1… |
CVE-2020-35792 | High | 8.3 | 2020-12-30 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1… |
CVE-2020-35791 | Medium | 6.4 | 2020-12-30 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before… |
CVE-2020-35790 | Medium | 6.4 | 2020-12-30 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0… |
CVE-2020-35789 | High | 8.8 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. |
CVE-2020-35788 | High | 7.6 | 2020-12-30 | NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user. |
CVE-2020-35787 | High | 8.0 | 2020-12-30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1… |
CVE-2020-35786 | Medium | 4.5 | 2020-12-30 | NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user. |
CVE-2020-35785 | High | 8.3 | 2020-12-30 | NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365). |
CVE-2020-35784 | Medium | 6.2 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev… |
CVE-2020-35783 | Medium | 6.5 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev… |
CVE-2020-35782 | High | 8.1 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524P… |
CVE-2020-35781 | High | 8.3 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
CVE-2020-35780 | High | 7.1 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
CVE-2020-35779 | High | 7.5 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. |
CVE-2020-35778 | Medium | 4.3 | 2020-12-30 | Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. |
CVE-2020-35777 | High | 8.4 | 2020-12-30 | NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. |
CVE-2020-10209 | High | 8.1 | 2020-12-30 | Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria… |
CVE-2020-10208 | Critical | 9.9 | 2020-12-30 | Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows aut… |
CVE-2020-10206 | Medium | 4.4 | 2020-12-30 | Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allow… |
CVE-2020-10210 | Critical | 9.8 | 2020-12-29 | Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B… |
CVE-2020-10207 | Critical | 9.8 | 2020-12-29 | Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7… |
CVE-2020-10148 | Critical | 9.8 | 2020-12-29 | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a… |
CVE-2020-27645 | High | 8.8 | 2020-12-29 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This m… |
CVE-2020-27644 | High | 8.8 | 2020-12-29 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This m… |
CVE-2020-27643 | Medium | 6.5 | 2020-12-29 | The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in prot… |
CVE-2020-16268 | High | 8.8 | 2020-12-29 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. Thi… |
CVE-2020-35735 | Medium | 4.7 | 2020-12-29 | Vidyo 02-09-/D allows clickjacking via the portal/ URI. |
CVE-2020-9223 | High | 7.5 | 2020-12-29 | There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may explo… |
CVE-2020-9208 | Medium | 6.5 | 2020-12-29 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the mo… |
CVE-2020-9207 | High | 7.8 | 2020-12-29 | There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers c… |
CVE-2020-9125 | Medium | 6.7 | 2020-12-29 | There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission c… |
CVE-2020-9124 | High | 7.5 | 2020-12-29 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by send… |
CVE-2020-9094 | High | 7.5 | 2020-12-29 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers ca… |
CVE-2020-9093 | Medium | 5.5 | 2020-12-29 | There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a func… |
CVE-2020-35774 | Medium | 5.4 | 2020-12-29 | server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms… |
CVE-2020-35773 | High | 8.8 | 2020-12-29 | The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. |
CVE-2020-28283 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execu… |
CVE-2020-28282 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-28281 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote cod… |
CVE-2020-28280 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'predefine' versions 0.0.0 through 0.1.2 allows an attacker to cause a denial of service and may lead to remote code execu… |
CVE-2020-28279 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'flattenizer' versions 0.0.5 through 1.0.5 allows an attacker to cause a denial of service and may lead to remote code exe… |
CVE-2020-28278 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'shvl' versions 1.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-1848 | Medium | 5.5 | 2020-12-29 | There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing… |
CVE-2020-29471 | Medium | 4.8 | 2020-12-29 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. When… |
CVE-2020-29470 | Medium | 4.8 | 2020-12-29 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in… |
CVE-2020-28277 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-28276 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-5807 | High | 7.5 | 2020-12-29 | An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attack… |
CVE-2020-5806 | Medium | 5.5 | 2020-12-29 | An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll… |
CVE-2020-5802 | High | 7.5 | 2020-12-29 | An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TC… |
CVE-2020-5801 | High | 7.5 | 2020-12-29 | An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest… |
CVE-2020-29475 | Medium | 4.8 | 2020-12-29 | nopCommerce Store 4.30 is affected by cross-site scripting (XSS) in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS p… |
CVE-2020-17533 | High | 8.1 | 2020-12-29 | Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting a… |
CVE-2020-25847 | High | 8.8 | 2020-12-29 | This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in… |
CVE-2020-35769 | Critical | 9.8 | 2020-12-29 | miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program. |
CVE-2020-26287 | High | 8.7 | 2020-12-29 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can inject arbitrary `script` tags in Hedge… |
CVE-2020-26286 | High | 7.5 | 2020-12-29 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticated attacker can upload arbitrary files… |
CVE-2020-13476 | Medium | 4.8 | 2020-12-28 | NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module. |
CVE-2020-13474 | Medium | 6.5 | 2020-12-28 | In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/E… |
CVE-2020-13473 | Medium | 5.5 | 2020-12-28 | NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file. |
CVE-2020-27172 | Critical | 9.8 | 2020-12-28 | An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write… |
CVE-2020-35766 | High | 7.8 | 2020-12-28 | The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to… |
CVE-2020-35730 | Medium | 6.1 | 2020-12-28 | An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message… |
CVE-2020-35616 | High | 7.5 | 2020-12-28 | An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations. |
CVE-2020-35615 | Medium | 6.3 | 2020-12-28 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability. |
CVE-2020-35614 | Medium | 5.3 | 2020-12-28 | An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page. |
CVE-2020-35613 | Critical | 9.8 | 2020-12-28 | An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injection vulnerability in the backend user lis… |
CVE-2020-35612 | High | 7.5 | 2020-12-28 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerab… |
CVE-2020-35611 | High | 7.5 | 2020-12-28 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current va… |
CVE-2020-35610 | High | 7.5 | 2020-12-28 | An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the access level of the corresponding terms. |
CVE-2020-26290 | Critical | 9.3 | 2020-12-28 | Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveragin… |
CVE-2020-25507 | High | 7.8 | 2020-12-28 | An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary cod… |
CVE-2020-14273 | High | 7.5 | 2020-12-28 | HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker cou… |
CVE-2020-27837 | Medium | 6.4 | 2020-12-28 | A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a u… |
CVE-2020-26289 | High | 7.5 | 2020-12-28 | date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which ca… |
CVE-2020-24360 | High | 7.4 | 2020-12-28 | An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed… |
CVE-2020-15898 | Medium | 5.3 | 2020-12-28 | In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by… |
CVE-2020-26569 | Medium | 5.9 | 2020-12-28 | In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded ac… |
CVE-2020-35627 | High | 8.8 | 2020-12-28 | Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once… |
CVE-2020-29245 | Medium | 6.5 | 2020-12-28 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData. |
CVE-2020-29244 | Medium | 6.5 | 2020-12-28 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame. |
CVE-2020-29243 | Medium | 6.5 | 2020-12-28 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame. |
CVE-2020-29242 | Medium | 6.5 | 2020-12-28 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame. |
CVE-2020-29160 | High | 7.5 | 2020-12-28 | An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing. |
CVE-2020-29159 | Medium | 4.9 | 2020-12-28 | An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This beh… |
CVE-2020-29158 | Medium | 4.3 | 2020-12-28 | An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the T… |
CVE-2020-26035 | Medium | 5.4 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket. |
CVE-2020-26034 | Medium | 4.3 | 2020-12-28 | An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user t… |
CVE-2020-26033 | Medium | 5.4 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check. |
CVE-2020-26032 | High | 7.5 | 2020-12-28 | An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a tes… |
CVE-2020-26031 | Medium | 4.3 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers (who are authenticated but have… |
CVE-2020-26030 | Critical | 9.8 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An atta… |
CVE-2020-26029 | Medium | 6.5 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks ar… |
CVE-2020-26028 | Medium | 4.9 | 2020-12-28 | An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets. |
CVE-2020-29194 | High | 7.5 | 2020-12-28 | Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative c… |
CVE-2020-29193 | Medium | 6.8 | 2020-12-28 | Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which is just the asdf keyboard row in reverse order). |