2020 CVEs (page 63)
Page 63 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-17098 | Medium | 5.5 | 2020-12-10 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2020-17097 | Low | 3.3 | 2020-12-10 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2020-17096 | High | 7.5 | 2020-12-10 | Windows NTFS Remote Code Execution Vulnerability |
CVE-2020-17095 | High | 8.5 | 2020-12-10 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2020-17094 | Medium | 5.5 | 2020-12-10 | Windows Error Reporting Information Disclosure Vulnerability |
CVE-2020-17092 | High | 7.8 | 2020-12-10 | Windows Network Connections Service Elevation of Privilege Vulnerability |
CVE-2020-17089 | High | 7.1 | 2020-12-10 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2020-17002 | High | 7.4 | 2020-12-10 | Azure SDK for C Security Feature Bypass Vulnerability |
CVE-2020-16996 | Medium | 6.5 | 2020-12-10 | Kerberos Security Feature Bypass Vulnerability |
CVE-2020-16971 | High | 7.4 | 2020-12-10 | Azure SDK for Java Security Feature Bypass Vulnerability |
CVE-2020-16964 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16963 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16962 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16961 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16960 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16959 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-16958 | High | 7.8 | 2020-12-10 | Windows Backup Engine Elevation of Privilege Vulnerability |
CVE-2020-29259 | Medium | 5.4 | 2020-12-09 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php. |
CVE-2020-29258 | Medium | 6.1 | 2020-12-09 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php. |
CVE-2020-29257 | Medium | 6.1 | 2020-12-09 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php. |
CVE-2020-10143 | High | 7.8 | 2020-12-09 | Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect contains a privileged service that uses thi… |
CVE-2020-25499 | High | 8.8 | 2020-12-09 | TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execut… |
CVE-2020-16600 | High | 7.8 | 2020-12-09 | A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixm… |
CVE-2020-16599 | Medium | 5.5 | 2020-12-09 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_… |
CVE-2020-16593 | Medium | 5.5 | 2020-12-09 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for… |
CVE-2020-16592 | Medium | 5.5 | 2020-12-09 | A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that… |
CVE-2020-16591 | Medium | 5.5 | 2020-12-09 | A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrat… |
CVE-2020-16590 | Medium | 5.5 | 2020-12-09 | A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readel… |
CVE-2020-16589 | Medium | 5.5 | 2020-12-09 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service… |
CVE-2020-16588 | Medium | 5.5 | 2020-12-09 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via… |
CVE-2020-16587 | Medium | 5.5 | 2020-12-09 | A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that c… |
CVE-2020-28086 | High | 7.5 | 2020-12-09 | pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password… |
CVE-2020-26257 | Medium | 6.5 | 2020-12-09 | Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix. A malicious or poorly-imple… |
CVE-2020-2049 | High | 7.8 | 2020-12-09 | A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows use… |
CVE-2020-2020 | Medium | 5.5 | 2020-12-09 | An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's in… |
CVE-2020-7787 | High | 8.2 | 2020-12-09 | This affects all versions of package react-adal. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh valu… |
CVE-2020-7776 | High | 7.1 | 2020-12-09 | This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comm… |
CVE-2020-29661 | High | 7.8 | 2020-12-09 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSP… |
CVE-2020-29660 | Medium | 4.4 | 2020-12-09 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may al… |
CVE-2020-29659 | Critical | 9.8 | 2020-12-09 | A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid… |
CVE-2020-26838 | Critical | 9.1 | 2020-12-09 | SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenti… |
CVE-2020-26837 | Critical | 9.1 | 2020-12-09 | SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing pa… |
CVE-2020-26836 | Medium | 6.1 | 2020-12-09 | SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attack… |
CVE-2020-26835 | Medium | 6.1 | 2020-12-09 | SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in th… |
CVE-2020-26834 | Medium | 5.4 | 2020-12-09 | SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manip… |
CVE-2020-26832 | High | 7.6 | 2020-12-09 | SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA… |
CVE-2020-26831 | Critical | 9.6 | 2020-12-09 | SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generati… |
CVE-2020-26830 | High | 8.1 | 2020-12-09 | SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequ… |
CVE-2020-26829 | Critical | 10.0 | 2020-12-09 | SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missin… |
CVE-2020-26828 | Medium | 6.4 | 2020-12-09 | SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types… |
CVE-2020-26826 | Medium | 6.5 | 2020-12-09 | Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without pr… |
CVE-2020-26816 | Medium | 4.5 | 2020-12-09 | SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key S… |
CVE-2020-26261 | High | 7.9 | 2020-12-09 | jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tok… |
CVE-2020-26260 | Medium | 6.4 | 2020-12-09 | BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page co… |
CVE-2020-25199 | High | 7.8 | 2020-12-09 | A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when processing project files. Opening a spec… |
CVE-2020-17529 | Critical | 9.8 | 2020-12-09 | Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by… |
CVE-2020-17528 | Critical | 9.1 | 2020-12-09 | Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by… |
CVE-2020-23520 | High | 7.2 | 2020-12-09 | imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality. |
CVE-2020-7337 | Medium | 6.5 | 2020-12-09 | Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to b… |
CVE-2020-29657 | Critical | 9.1 | 2020-12-09 | In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file. |
CVE-2020-29656 | High | 7.5 | 2020-12-09 | An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initia… |
CVE-2020-29655 | High | 7.5 | 2020-12-09 | An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp… |
CVE-2020-29651 | High | 7.5 | 2020-12-09 | A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-tim… |
CVE-2020-27349 | Medium | 5.5 | 2020-12-09 | Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-… |
CVE-2020-16128 | Low | 3.8 | 2020-12-09 | The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affect… |
CVE-2020-26970 | High | 8.8 | 2020-12-09 | When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on p… |
CVE-2020-26969 | High | 8.8 | 2020-12-09 | Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2020-26968 | High | 8.8 | 2020-12-09 | Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2020-26967 | Medium | 6.5 | 2020-12-09 | When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than thos… |
CVE-2020-26966 | Medium | 6.5 | 2020-12-09 | Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; res… |
CVE-2020-26965 | Medium | 6.5 | 2020-12-09 | Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when… |
CVE-2020-26964 | Medium | 6.8 | 2020-12-09 | If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to t… |
CVE-2020-26963 | Medium | 4.3 | 2020-12-09 | Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API ca… |
CVE-2020-26962 | Medium | 6.1 | 2020-12-09 | Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjac… |
CVE-2020-26961 | Medium | 6.5 | 2020-12-09 | When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver… |
CVE-2020-26960 | High | 8.8 | 2020-12-09 | If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free… |
CVE-2020-26959 | High | 8.8 | 2020-12-09 | During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent… |
CVE-2020-26958 | Medium | 6.1 | 2020-12-09 | Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a… |
CVE-2020-26957 | Medium | 6.5 | 2020-12-09 | OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some certificate re… |
CVE-2020-26956 | Medium | 6.1 | 2020-12-09 | In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox… |
CVE-2020-26955 | Medium | 6.5 | 2020-12-09 | When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same do… |
CVE-2020-26954 | Medium | 4.3 | 2020-12-09 | When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp mani… |
CVE-2020-26953 | Medium | 4.3 | 2020-12-09 | It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or other… |
CVE-2020-26952 | High | 8.8 | 2020-12-09 | Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-… |
CVE-2020-26951 | Medium | 6.1 | 2020-12-09 | A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of expl… |
CVE-2020-26950 | High | 8.8 | 2020-12-09 | In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerab… |
CVE-2020-25627 | Medium | 6.1 | 2020-12-09 | The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2. |
CVE-2020-10146 | Medium | 5.7 | 2020-12-09 | The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to… |
CVE-2020-27614 | High | 7.8 | 2020-12-09 | AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege… |
CVE-2020-26249 | High | 7.7 | 2020-12-09 | Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been… |
CVE-2020-26234 | Medium | 4.8 | 2020-12-08 | Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname ver… |
CVE-2020-9991 | High | 7.5 | 2020-12-08 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvO… |
CVE-2020-28274 | Critical | 9.8 | 2020-12-08 | Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-27918 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iClou… |
CVE-2020-27896 | Medium | 5.5 | 2020-12-08 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file sys… |
CVE-2020-27821 | Medium | 6.0 | 2020-12-08 | A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write acces… |
CVE-2020-27758 | Low | 3.3 | 2020-12-08 | A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in th… |
CVE-2020-27757 | Low | 3.3 | 2020-12-08 | A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the r… |
CVE-2020-27756 | Medium | 5.5 | 2020-12-08 | In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavio… |
CVE-2020-27755 | Low | 3.3 | 2020-12-08 | in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size… |