2020 CVEs (page 61)
Page 61 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35202 | Medium | 5.4 | 2020-12-12 | Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. |
CVE-2020-35201 | Medium | 5.4 | 2020-12-12 | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS. |
CVE-2020-35200 | Medium | 6.1 | 2020-12-12 | Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS. |
CVE-2020-35199 | Medium | 5.4 | 2020-12-12 | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS. |
CVE-2020-35176 | Medium | 5.3 | 2020-12-12 | In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a… |
CVE-2020-29654 | High | 7.8 | 2020-12-12 | Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account. |
CVE-2020-29563 | Critical | 9.8 | 2020-12-12 | An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticate… |
CVE-2020-35175 | Medium | 5.3 | 2020-12-11 | Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API. |
CVE-2020-25112 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leads to Denial-of-Serv… |
CVE-2020-25111 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check for the IPv6 header length. This leads to Denial-of-Service an… |
CVE-2020-25110 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is us… |
CVE-2020-25109 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in a DNS header) is not checked against t… |
CVE-2020-25108 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked (it can be set to an arbitrary value f… |
CVE-2020-25107 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to… |
CVE-2020-24383 | Critical | 9.1 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resour… |
CVE-2020-24341 | Critical | 9.1 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming… |
CVE-2020-24340 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_md… |
CVE-2020-24339 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_d… |
CVE-2020-24338 | Critical | 9.8 | 2020-12-11 | An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c doe… |
CVE-2020-24337 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is p… |
CVE-2020-24336 | Critical | 9.8 | 2020-12-11 | An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify wheth… |
CVE-2020-24334 | High | 8.2 | 2020-12-11 | The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DN… |
CVE-2020-17470 | Medium | 5.3 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set sufficiently random transaction IDs (t… |
CVE-2020-17469 | High | 7.5 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragm… |
CVE-2020-17468 | High | 7.5 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header (in the IPv6 extension headers) doesn't check for a valid length o… |
CVE-2020-17467 | Critical | 9.1 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR request doesn't check for '\0' termination. Therefore, the de… |
CVE-2020-17445 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options hea… |
CVE-2020-17444 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers are valid) doesn't… |
CVE-2020-17443 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter t… |
CVE-2020-17442 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header lengt… |
CVE-2020-17441 | Critical | 9.1 | 2020-12-11 | An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actu… |
CVE-2020-17440 | High | 7.5 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names pr… |
CVE-2020-17439 | High | 8.3 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DN… |
CVE-2020-17438 | Critical | 9.8 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the tota… |
CVE-2020-17437 | High | 8.2 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to igno… |
CVE-2020-13988 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packe… |
CVE-2020-13987 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for… |
CVE-2020-13986 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network p… |
CVE-2020-13985 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers… |
CVE-2020-13984 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext_hdr_opt… |
CVE-2020-15376 | Medium | 4.3 | 2020-12-11 | Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation that could a… |
CVE-2020-15375 | Medium | 6.7 | 2020-12-11 | Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command line int… |
CVE-2020-29455 | Medium | 6.1 | 2020-12-11 | A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to… |
CVE-2020-27730 | Critical | 9.8 | 2020-12-11 | In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. |
CVE-2020-5950 | Medium | 5.3 | 2020-12-11 | On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP sys… |
CVE-2020-5949 | High | 7.5 | 2020-12-11 | On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel… |
CVE-2020-5948 | Critical | 9.6 | 2020-12-11 | On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl… |
CVE-2020-35149 | Medium | 5.3 | 2020-12-11 | lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation. |
CVE-2020-27825 | Medium | 5.7 | 2020-12-11 | A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffe… |
CVE-2020-27713 | High | 7.5 | 2020-12-11 | In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request… |
CVE-2020-26421 | Medium | 4.2 | 2020-12-11 | Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafte… |
CVE-2020-26420 | Low | 3.1 | 2020-12-11 | Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. |
CVE-2020-26419 | Low | 3.1 | 2020-12-11 | Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. |
CVE-2020-26418 | Low | 3.1 | 2020-12-11 | Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. |
CVE-2020-19165 | Critical | 9.8 | 2020-12-11 | PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter. |
CVE-2020-7791 | High | 7.5 | 2020-12-11 | This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs… |
CVE-2020-29574 | Critical | 9.8 | 2020-12-11 | An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely. |
CVE-2020-28440 | Critical | 9.8 | 2020-12-11 | All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function. |
CVE-2020-28439 | Critical | 9.8 | 2020-12-11 | This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js… |
CVE-2020-27134 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27133 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27132 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27127 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-26265 | Medium | 5.3 | 2020-12-11 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulner… |
CVE-2020-26264 | Medium | 6.5 | 2020-12-11 | Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can mak… |
CVE-2020-29254 | High | 8.8 | 2020-12-11 | TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross-site request forge… |
CVE-2020-27508 | High | 7.5 | 2020-12-11 | In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security. |
CVE-2020-15357 | Critical | 9.8 | 2020-12-11 | Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell meta… |
CVE-2020-15023 | Medium | 5.9 | 2020-12-11 | Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random num… |
CVE-2020-12149 | Medium | 6.8 | 2020-12-11 | The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config fi… |
CVE-2020-12148 | Medium | 6.8 | 2020-12-11 | A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary comm… |
CVE-2020-4633 | High | 8.8 | 2020-12-11 | IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation. |
CVE-2020-29591 | Critical | 9.8 | 2020-12-11 | Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the regis… |
CVE-2020-28838 | Low | 3.5 | 2020-12-11 | Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart. |
CVE-2020-7793 | High | 7.5 | 2020-12-11 | The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info). |
CVE-2020-17515 | Medium | 6.1 | 2020-12-11 | The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10… |
CVE-2020-7792 | High | 7.5 | 2020-12-11 | This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects int… |
CVE-2020-7790 | Medium | 5.3 | 2020-12-11 | This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resul… |
CVE-2020-7788 | High | 7.3 | 2020-12-11 | This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the p… |
CVE-2020-7789 | Medium | 5.6 | 2020-12-11 | This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sani… |
CVE-2020-35135 | High | 8.8 | 2020-12-11 | The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. |
CVE-2020-35132 | Medium | 5.4 | 2020-12-11 | An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time… |
CVE-2020-35127 | Medium | 5.4 | 2020-12-11 | Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS. |
CVE-2020-27786 | High | 7.8 | 2020-12-11 | A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devic… |
CVE-2020-26411 | Medium | 4.3 | 2020-12-11 | A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2). Usin… |
CVE-2020-35126 | Medium | 4.8 | 2020-12-11 | Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report… |
CVE-2020-27828 | High | 7.8 | 2020-12-11 | There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds writ… |
CVE-2020-26417 | Medium | 5.3 | 2020-12-11 | Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5… |
CVE-2020-26416 | Medium | 4.0 | 2020-12-11 | Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=… |
CVE-2020-26415 | Medium | 4.3 | 2020-12-11 | Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12… |
CVE-2020-26413 | Medium | 5.3 | 2020-12-11 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email… |
CVE-2020-26412 | Low | 3.1 | 2020-12-11 | Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2. |
CVE-2020-26408 | Medium | 5.3 | 2020-12-11 | A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker… |
CVE-2020-13556 | Critical | 9.8 | 2020-12-11 | An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially c… |
CVE-2020-13530 | High | 7.5 | 2020-12-11 | A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large numb… |
CVE-2020-13520 | High | 7.8 | 2020-12-11 | An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed… |
CVE-2020-13357 | Medium | 4.3 | 2020-12-11 | An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user… |
CVE-2020-9301 | High | 8.8 | 2020-12-11 | Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnera… |
CVE-2020-24447 | High | 7.0 | 2020-12-11 | Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code exe… |
CVE-2020-24440 | High | 7.0 | 2020-12-11 | Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of th… |