2020 CVEs (page 55)
Page 55 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28096 | Medium | 6.8 | 2020-12-28 | FOSCAM FHD X1 1.14.2.4 devices allow attackers (with physical UART access) to login via the ipc.fos~ password. |
CVE-2020-28094 | High | 7.5 | 2020-12-28 | On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-L… |
CVE-2020-28093 | High | 7.2 | 2020-12-28 | On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, admin, support, user, and nobody have a password of 1234. |
CVE-2020-35738 | Medium | 6.1 | 2020-12-28 | WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties cl… |
CVE-2020-35736 | High | 7.5 | 2020-12-27 | GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused. |
CVE-2020-29156 | Medium | 5.3 | 2020-12-27 | The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_st… |
CVE-2020-29250 | Medium | 6.1 | 2020-12-27 | CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php. |
CVE-2020-29249 | Medium | 6.1 | 2020-12-27 | CXUUCMS V3 allows class="layui-input" XSS. |
CVE-2020-29299 | High | 7.2 | 2020-12-27 | Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise befo… |
CVE-2020-29204 | Medium | 6.1 | 2020-12-27 | XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java. |
CVE-2020-35729 | Critical | 9.8 | 2020-12-27 | KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. |
CVE-2020-35728 | High | 8.1 | 2020-12-27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache… |
CVE-2020-35448 | Low | 3.3 | 2020-12-27 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occu… |
CVE-2020-8290 | High | 7.8 | 2020-12-27 | Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handl… |
CVE-2020-8289 | High | 7.8 | 2020-12-27 | Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardc… |
CVE-2020-7845 | High | 8.1 | 2020-12-27 | Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote a… |
CVE-2020-35678 | Medium | 6.1 | 2020-12-27 | Autobahn|Python before 20.12.3 allows redirect header injection. |
CVE-2020-35245 | Critical | 9.8 | 2020-12-26 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser. |
CVE-2020-35244 | Critical | 9.8 | 2020-12-26 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup. |
CVE-2020-35243 | Critical | 9.8 | 2020-12-26 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb. |
CVE-2020-35242 | Critical | 9.8 | 2020-12-26 | Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory. |
CVE-2020-29203 | Critical | 9.8 | 2020-12-26 | struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT. |
CVE-2020-28759 | Medium | 5.5 | 2020-12-26 | The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow s… |
CVE-2020-35364 | Critical | 9.8 | 2020-12-26 | Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong serv… |
CVE-2020-35362 | High | 7.5 | 2020-12-26 | DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5C… |
CVE-2020-35284 | High | 7.5 | 2020-12-26 | Flamingo (aka FlamingoIM) through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5… |
CVE-2020-35450 | High | 7.5 | 2020-12-26 | Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. |
CVE-2020-35359 | High | 7.5 | 2020-12-26 | Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. |
CVE-2020-35437 | Medium | 6.1 | 2020-12-26 | Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI. |
CVE-2020-35376 | High | 7.5 | 2020-12-26 | Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. |
CVE-2020-35349 | Medium | 4.8 | 2020-12-26 | Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page). |
CVE-2020-35347 | Medium | 6.5 | 2020-12-26 | CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add. |
CVE-2020-35346 | Medium | 4.8 | 2020-12-26 | CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of adm… |
CVE-2020-20412 | Medium | 6.5 | 2020-12-26 | lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE… |
CVE-2020-35388 | High | 7.5 | 2020-12-26 | rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to… |
CVE-2020-35575 | Critical | 9.8 | 2020-12-26 | A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This a… |
CVE-2020-29385 | Medium | 5.5 | 2020-12-26 | GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, se… |
CVE-2020-29172 | Medium | 6.1 | 2020-12-26 | A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting. |
CVE-2020-27515 | Medium | 6.1 | 2020-12-26 | A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field. |
CVE-2020-26766 | High | 8.8 | 2020-12-26 | A Cross Site Request Forgery (CSRF) vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin… |
CVE-2020-25917 | High | 8.8 | 2020-12-26 | Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" pri… |
CVE-2020-35716 | High | 7.5 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a long /goform/langSwi… |
CVE-2020-35715 | High | 8.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the u… |
CVE-2020-35714 | High | 8.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction… |
CVE-2020-35713 | Critical | 9.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the gof… |
CVE-2020-35712 | Critical | 9.8 | 2020-12-26 | Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations. |
CVE-2020-35711 | High | 7.5 | 2020-12-25 | An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or… |
CVE-2020-35710 | Medium | 5.3 | 2020-12-25 | Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank c… |
CVE-2020-35709 | Medium | 4.9 | 2020-12-25 | bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application/octet-stream") to ../media/images/ via the admin/index.php?mod… |
CVE-2020-35708 | High | 7.2 | 2020-12-25 | phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page. |
CVE-2020-35707 | Medium | 5.4 | 2020-12-25 | Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. |
CVE-2020-35706 | Medium | 5.4 | 2020-12-25 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. |
CVE-2020-35705 | Medium | 5.4 | 2020-12-25 | Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. |
CVE-2020-35704 | Medium | 5.4 | 2020-12-25 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. |
CVE-2020-35702 | High | 7.8 | 2020-12-25 | DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only… |
CVE-2020-26282 | Critical | 10.0 | 2020-12-24 | BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works we… |
CVE-2020-29474 | Critical | 9.8 | 2020-12-24 | EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to pe… |
CVE-2020-29472 | Critical | 9.8 | 2020-12-24 | EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL inje… |
CVE-2020-29247 | Medium | 4.8 | 2020-12-24 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user wi… |
CVE-2020-28912 | High | 7.0 | 2020-12-24 | With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code… |
CVE-2020-11093 | High | 7.5 | 2020-12-24 | Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there… |
CVE-2020-35693 | High | 8.8 | 2020-12-24 | On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently… |
CVE-2020-24658 | High | 7.8 | 2020-12-24 | Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature… |
CVE-2020-9202 | Medium | 4.4 | 2020-12-24 | There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information… |
CVE-2020-9201 | Medium | 6.5 | 2020-12-24 | There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended b… |
CVE-2020-9200 | High | 7.8 | 2020-12-24 | There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through… |
CVE-2020-9137 | Medium | 6.7 | 2020-12-24 | There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient… |
CVE-2020-9120 | High | 7.5 | 2020-12-24 | CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages… |
CVE-2020-9119 | Medium | 6.2 | 2020-12-24 | There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and… |
CVE-2020-35680 | High | 7.5 | 2020-12-24 | smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and d… |
CVE-2020-35679 | High | 7.5 | 2020-12-24 | smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an i… |
CVE-2020-35659 | Medium | 6.1 | 2020-12-24 | The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS. An attacker with the ability to directly or indirectly query DNS with a malicious hostna… |
CVE-2020-27729 | Medium | 6.1 | 2020-12-24 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, an undisclosed link on the BIG-IP APM virtu… |
CVE-2020-27728 | High | 7.5 | 2020-12-24 | On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under certain conditions, Analytics, Visibility, and Reporting daemo… |
CVE-2020-27727 | Medium | 4.9 | 2020-12-24 | On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iApps… |
CVE-2020-27726 | Medium | 6.1 | 2020-12-24 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, a reflected cross-site scripting (XSS) vulnerability exists… |
CVE-2020-27723 | High | 7.5 | 2020-12-24 | In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Micro… |
CVE-2020-27722 | Medium | 6.5 | 2020-12-24 | In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control proto… |
CVE-2020-27720 | High | 7.5 | 2020-12-24 | On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA… |
CVE-2020-27719 | Medium | 6.1 | 2020-12-24 | On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configura… |
CVE-2020-27717 | High | 7.5 | 2020-12-24 | On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series of DNS requests may cause TMM to restar… |
CVE-2020-27716 | High | 7.5 | 2020-12-24 | On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM virtual server processes traffic of an und… |
CVE-2020-27715 | High | 7.5 | 2020-12-24 | On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the… |
CVE-2020-27714 | High | 7.5 | 2020-12-24 | On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with t… |
CVE-2020-29189 | High | 8.1 | 2020-12-24 | Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full acces… |
CVE-2020-28190 | Medium | 5.9 | 2020-12-24 | TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able… |
CVE-2020-28188 | Critical | 9.8 | 2020-12-24 | Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php… |
CVE-2020-28187 | Critical | 9.8 | 2020-12-24 | Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote authenticated attackers to read, edit or delete any file within the file… |
CVE-2020-28186 | High | 7.3 | 2020-12-24 | Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover. |
CVE-2020-28185 | Medium | 5.3 | 2020-12-24 | User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username… |
CVE-2020-28184 | Medium | 5.4 | 2020-12-24 | Cross-site scripting (XSS) vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod para… |
CVE-2020-28169 | High | 7.0 | 2020-12-24 | The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a fi… |
CVE-2020-27725 | Medium | 4.3 | 2020-12-24 | In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory wh… |
CVE-2020-27724 | Medium | 6.5 | 2020-12-24 | In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems runn… |
CVE-2020-27721 | High | 7.5 | 2020-12-24 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, in a BIG-IP DNS / BIG-IP LTM GSLB deployment… |
CVE-2020-27718 | High | 7.5 | 2020-12-24 | When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, or 11.6.1-11.6.5.2… |
CVE-2020-35677 | Medium | 4.8 | 2020-12-24 | BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to creat… |
CVE-2020-35676 | Medium | 6.1 | 2020-12-24 | BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such… |
CVE-2020-35669 | Medium | 6.1 | 2020-12-24 | An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possi… |
CVE-2020-5684 | Medium | 4.8 | 2020-12-24 | iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which… |