2020 CVEs (page 72)
Page 72 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12927 | High | 7.8 | 2020-11-12 | A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authorit… |
CVE-2020-12926 | Medium | 6.4 | 2020-11-12 | The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state w… |
CVE-2020-12912 | Medium | 5.5 | 2020-11-12 | A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interfa… |
CVE-2020-8669 | Medium | 6.5 | 2020-11-12 | Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information di… |
CVE-2020-27386 | High | 8.8 | 2020-11-12 | An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the Fil… |
CVE-2020-27385 | High | 8.1 | 2020-11-12 | Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacker to read and write… |
CVE-2020-26805 | High | 7.2 | 2020-11-12 | In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request… |
CVE-2020-26804 | High | 8.8 | 2020-11-12 | In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared… |
CVE-2020-26803 | High | 8.8 | 2020-11-12 | In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerab… |
CVE-2020-24525 | High | 7.8 | 2020-11-12 | Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2020-24460 | Medium | 5.5 | 2020-11-12 | Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local ac… |
CVE-2020-24456 | High | 7.8 | 2020-11-12 | Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2020-24454 | High | 7.5 | 2020-11-12 | Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime S… |
CVE-2020-16273 | High | 7.8 | 2020-11-12 | In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow attack in v8-M Trust… |
CVE-2020-12353 | Medium | 6.5 | 2020-11-12 | Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service v… |
CVE-2020-12350 | High | 7.8 | 2020-11-12 | Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local ac… |
CVE-2020-12349 | Medium | 6.5 | 2020-11-12 | Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information di… |
CVE-2020-12347 | High | 8.8 | 2020-11-12 | Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of… |
CVE-2020-12346 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable… |
CVE-2020-12345 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable e… |
CVE-2020-12337 | Medium | 6.7 | 2020-11-12 | Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2020-12336 | High | 7.8 | 2020-11-12 | Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via l… |
CVE-2020-12335 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially… |
CVE-2020-12334 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalat… |
CVE-2020-12333 | High | 7.8 | 2020-11-12 | Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation… |
CVE-2020-12332 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation… |
CVE-2020-12331 | High | 7.8 | 2020-11-12 | Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2020-12330 | High | 7.8 | 2020-11-12 | Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable… |
CVE-2020-12329 | High | 7.8 | 2020-11-12 | Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2020-12328 | Medium | 4.4 | 2020-11-12 | Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable info… |
CVE-2020-12327 | Medium | 4.4 | 2020-11-12 | Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially… |
CVE-2020-12326 | Medium | 5.5 | 2020-11-12 | Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable infor… |
CVE-2020-12325 | High | 7.8 | 2020-11-12 | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable… |
CVE-2020-12324 | High | 7.8 | 2020-11-12 | Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable… |
CVE-2020-12323 | Medium | 6.7 | 2020-11-12 | Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentially enable escalation of privilege via… |
CVE-2020-12320 | High | 7.8 | 2020-11-12 | Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of p… |
CVE-2020-12316 | Medium | 5.5 | 2020-11-12 | Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via loc… |
CVE-2020-12315 | Critical | 9.8 | 2020-11-12 | Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
CVE-2020-0573 | Medium | 5.5 | 2020-11-12 | Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2020-0572 | Medium | 6.7 | 2020-11-12 | Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation o… |
CVE-2020-8767 | Medium | 5.5 | 2020-11-12 | Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of… |
CVE-2020-8766 | Medium | 6.5 | 2020-11-12 | Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via ad… |
CVE-2020-8764 | Medium | 6.7 | 2020-11-12 | Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acces… |
CVE-2020-8761 | Medium | 4.6 | 2020-11-12 | Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable info… |
CVE-2020-8760 | High | 7.8 | 2020-11-12 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable… |
CVE-2020-8757 | Medium | 6.7 | 2020-11-12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially en… |
CVE-2020-8756 | Medium | 6.7 | 2020-11-12 | Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potent… |
CVE-2020-8755 | Medium | 6.4 | 2020-11-12 | Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow a… |
CVE-2020-8754 | High | 7.5 | 2020-11-12 | Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated us… |
CVE-2020-8753 | High | 7.5 | 2020-11-12 | Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticat… |
CVE-2020-8752 | Critical | 9.8 | 2020-11-12 | Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated… |
CVE-2020-8751 | Medium | 4.6 | 2020-11-12 | Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated u… |
CVE-2020-8750 | High | 7.8 | 2020-11-12 | Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2020-8749 | High | 8.8 | 2020-11-12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentia… |
CVE-2020-8747 | Critical | 9.1 | 2020-11-12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentia… |
CVE-2020-8746 | Medium | 6.5 | 2020-11-12 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentiall… |
CVE-2020-8745 | Medium | 6.8 | 2020-11-12 | Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.2… |
CVE-2020-8744 | High | 7.8 | 2020-11-12 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Inte… |
CVE-2020-8740 | Medium | 6.7 | 2020-11-12 | Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege v… |
CVE-2020-8739 | High | 7.8 | 2020-11-12 | Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable esc… |
CVE-2020-8738 | Medium | 6.7 | 2020-11-12 | Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation o… |
CVE-2020-8737 | Medium | 6.8 | 2020-11-12 | Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow… |
CVE-2020-8705 | Medium | 6.8 | 2020-11-12 | Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14… |
CVE-2020-8698 | Medium | 5.5 | 2020-11-12 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local acces… |
CVE-2020-8696 | Medium | 5.5 | 2020-11-12 | Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable informat… |
CVE-2020-8695 | Medium | 5.5 | 2020-11-12 | Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local ac… |
CVE-2020-8694 | Medium | 5.5 | 2020-11-12 | Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosur… |
CVE-2020-8693 | Medium | 6.7 | 2020-11-12 | Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of pr… |
CVE-2020-8692 | Medium | 6.7 | 2020-11-12 | Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enabl… |
CVE-2020-8691 | Medium | 6.7 | 2020-11-12 | A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or… |
CVE-2020-8690 | Medium | 6.7 | 2020-11-12 | Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of pri… |
CVE-2020-8677 | Medium | 4.4 | 2020-11-12 | Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via loc… |
CVE-2020-8676 | Medium | 6.7 | 2020-11-12 | Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege v… |
CVE-2020-7472 | Critical | 9.8 | 2020-11-12 | An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and… |
CVE-2020-28271 | Critical | 9.8 | 2020-11-12 | Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-28270 | Critical | 9.8 | 2020-11-12 | Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remot… |
CVE-2020-28269 | Critical | 9.8 | 2020-11-12 | Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2020-28247 | Medium | 5.3 | 2020-11-12 | The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. |
CVE-2020-24573 | High | 7.5 | 2020-11-12 | BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component. |
CVE-2020-13771 | High | 7.8 | 2020-11-12 | Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain… |
CVE-2020-13770 | High | 7.8 | 2020-11-12 | Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services… |
CVE-2020-12356 | Medium | 4.4 | 2020-11-12 | Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially ena… |
CVE-2020-12355 | Medium | 6.8 | 2020-11-12 | Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow an unauthenticated u… |
CVE-2020-12354 | High | 7.8 | 2020-11-12 | Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escala… |
CVE-2020-12322 | Medium | 6.5 | 2020-11-12 | Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial… |
CVE-2020-12321 | High | 8.8 | 2020-11-12 | Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escal… |
CVE-2020-12319 | Medium | 6.5 | 2020-11-12 | Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enab… |
CVE-2020-12318 | High | 7.8 | 2020-11-12 | Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalat… |
CVE-2020-12317 | Medium | 6.5 | 2020-11-12 | Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial… |
CVE-2020-12314 | Medium | 6.5 | 2020-11-12 | Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial o… |
CVE-2020-12312 | Medium | 6.8 | 2020-11-12 | Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow… |
CVE-2020-12311 | Medium | 4.6 | 2020-11-12 | Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentiall… |
CVE-2020-12310 | Medium | 4.6 | 2020-11-12 | Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentiall… |
CVE-2020-12309 | Medium | 4.6 | 2020-11-12 | Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potential… |
CVE-2020-12308 | Medium | 6.5 | 2020-11-12 | Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information… |
CVE-2020-12307 | High | 7.8 | 2020-11-12 | Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalatio… |
CVE-2020-12306 | High | 7.8 | 2020-11-12 | Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potent… |
CVE-2020-12304 | High | 7.8 | 2020-11-12 | Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of pr… |
CVE-2020-12303 | High | 7.8 | 2020-11-12 | Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3… |
CVE-2020-12297 | High | 7.8 | 2020-11-12 | Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and… |