2020 CVEs (page 7)
Page 7 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36714 | High | 7.4 | 2023-10-20 | The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to… |
CVE-2020-36706 | Critical | 9.8 | 2023-10-20 | The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/js… |
CVE-2020-36698 | High | 8.8 | 2023-10-20 | The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions up to, and including, 2.50. This is du… |
CVE-2020-27636 | Critical | 9.1 | 2023-10-10 | In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random. |
CVE-2020-27635 | Critical | 9.1 | 2023-10-10 | In PicoTCP 1.7.0, TCP ISNs are improperly random. |
CVE-2020-27634 | Critical | 9.1 | 2023-10-10 | In Contiki 4.5, TCP ISNs are improperly random. |
CVE-2020-27633 | Critical | 9.1 | 2023-10-10 | In FNET 4.6.3, TCP ISNs are improperly random. |
CVE-2020-27631 | Critical | 9.8 | 2023-10-10 | In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random. |
CVE-2020-27630 | Critical | 9.8 | 2023-10-10 | In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random. |
CVE-2020-27213 | High | 7.5 | 2023-10-10 | An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficien… |
CVE-2020-18336 | High | 7.4 | 2023-10-10 | Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file exporting function. |
CVE-2020-24089 | Medium | 5.5 | 2023-09-20 | An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS). |
CVE-2020-36766 | Low | 3.3 | 2023-09-18 | An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memory on specific hardware to unprivileged… |
CVE-2020-19559 | Critical | 9.8 | 2023-09-11 | An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter. |
CVE-2020-19323 | High | 7.5 | 2023-09-11 | An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via… |
CVE-2020-19320 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. |
CVE-2020-19319 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. |
CVE-2020-19318 | High | 8.8 | 2023-09-11 | Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code… |
CVE-2020-24088 | High | 7.8 | 2023-09-11 | An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. |
CVE-2020-10132 | Medium | 6.1 | 2023-09-06 | SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration. |
CVE-2020-10131 | Critical | 9.8 | 2023-09-06 | SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter. |
CVE-2020-10130 | High | 8.8 | 2023-09-06 | SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system. |
CVE-2020-10129 | High | 8.8 | 2023-09-06 | SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality. |
CVE-2020-10128 | Medium | 5.4 | 2023-09-05 | SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple pa… |
CVE-2020-35593 | High | 7.8 | 2023-09-05 | BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host. |
CVE-2020-22612 | Critical | 9.8 | 2023-09-01 | Installer RCE on settings file write in MyBB before 1.8.22. |
CVE-2020-18912 | Critical | 9.8 | 2023-08-29 | An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php. |
CVE-2020-24165 | High | 8.8 | 2023-08-28 | An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service… |
CVE-2020-27366 | Medium | 6.1 | 2023-08-28 | Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code. |
CVE-2020-11711 | Medium | 4.8 | 2023-08-25 | An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer f… |
CVE-2020-24113 | Critical | 9.1 | 2023-08-22 | Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and caus… |
CVE-2020-35357 | Medium | 6.5 | 2023-08-22 | A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing… |
CVE-2020-35342 | High | 7.5 | 2023-08-22 | GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an… |
CVE-2020-27418 | Medium | 4.4 | 2023-08-22 | A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. |
CVE-2020-26683 | Medium | 5.5 | 2023-08-22 | A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information. |
CVE-2020-26652 | High | 7.5 | 2023-08-22 | An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. |
CVE-2020-25887 | High | 8.8 | 2023-08-22 | Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. |
CVE-2020-24295 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted ps… |
CVE-2020-24294 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of servic… |
CVE-2020-24293 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of c… |
CVE-2020-24292 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafte… |
CVE-2020-23992 | Medium | 6.1 | 2023-08-22 | Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. |
CVE-2020-23804 | High | 7.5 | 2023-08-22 | Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. |
CVE-2020-23793 | High | 8.6 | 2023-08-22 | An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvi… |
CVE-2020-22916 | Medium | 5.5 | 2023-08-22 | An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "end… |
CVE-2020-22628 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. |
CVE-2020-22570 | High | 7.5 | 2023-08-22 | Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. |
CVE-2020-22524 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. |
CVE-2020-22219 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. |
CVE-2020-22218 | High | 7.5 | 2023-08-22 | An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. |
CVE-2020-22217 | Medium | 5.9 | 2023-08-22 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. |
CVE-2020-22181 | Medium | 6.1 | 2023-08-22 | A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi |
CVE-2020-21896 | Medium | 5.5 | 2023-08-22 | A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers… |
CVE-2020-21890 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service… |
CVE-2020-21724 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via… |
CVE-2020-21723 | Medium | 5.5 | 2023-08-22 | A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause… |
CVE-2020-21722 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. |
CVE-2020-21710 | Medium | 5.5 | 2023-08-22 | A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via… |
CVE-2020-21699 | High | 7.5 | 2023-08-22 | The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter… |
CVE-2020-21687 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21686 | Medium | 5.5 | 2023-08-22 | A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of servic… |
CVE-2020-21685 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21679 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of c… |
CVE-2020-21583 | Medium | 6.7 | 2023-08-22 | An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the… |
CVE-2020-21528 | Medium | 5.5 | 2023-08-22 | A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service vi… |
CVE-2020-21490 | Medium | 5.5 | 2023-08-22 | An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled. |
CVE-2020-21469 | Medium | 4.4 | 2023-08-22 | An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the v… |
CVE-2020-21428 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts vi… |
CVE-2020-21427 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other… |
CVE-2020-21426 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other im… |
CVE-2020-21047 | Medium | 5.5 | 2023-08-22 | The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crash… |
CVE-2020-20813 | High | 7.5 | 2023-08-22 | Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. |
CVE-2020-19909 | Low | 3.3 | 2023-08-22 | Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct securit… |
CVE-2020-19726 | High | 8.8 | 2023-08-22 | An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of… |
CVE-2020-19725 | High | 7.8 | 2023-08-22 | There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes… |
CVE-2020-19724 | Medium | 5.5 | 2023-08-22 | A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command. |
CVE-2020-19190 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. |
CVE-2020-19189 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service v… |
CVE-2020-19188 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted… |
CVE-2020-19187 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted… |
CVE-2020-19186 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafte… |
CVE-2020-19185 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via cr… |
CVE-2020-18839 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. |
CVE-2020-18831 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecif… |
CVE-2020-18781 | Medium | 5.5 | 2023-08-22 | Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be trigge… |
CVE-2020-18780 | Medium | 5.5 | 2023-08-22 | A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. |
CVE-2020-18770 | Medium | 5.5 | 2023-08-22 | An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. |
CVE-2020-18768 | Medium | 5.5 | 2023-08-22 | There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted t… |
CVE-2020-18652 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp… |
CVE-2020-18651 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of servi… |
CVE-2020-18494 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. |
CVE-2020-18382 | Medium | 6.5 | 2023-08-22 | Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a se… |
CVE-2020-18378 | Medium | 6.5 | 2023-08-22 | A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a se… |
CVE-2020-18232 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. |
CVE-2020-28715 | Critical | 9.8 | 2023-08-21 | An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privilege… |
CVE-2020-26037 | Critical | 9.8 | 2023-08-16 | Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary cod… |
CVE-2020-36615 | High | 7.8 | 2023-08-14 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted font may lead… |
CVE-2020-36138 | High | 7.5 | 2023-08-11 | An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS). |
CVE-2020-36136 | High | 7.5 | 2023-08-11 | SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php. |
CVE-2020-36082 | Critical | 9.8 | 2023-08-11 | File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to… |