2020 CVEs (page 74)
Page 74 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-17065 | High | 7.8 | 2020-11-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2020-17064 | High | 7.8 | 2020-11-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2020-17063 | Medium | 6.8 | 2020-11-11 | Microsoft Office Online Spoofing Vulnerability |
CVE-2020-17062 | High | 7.8 | 2020-11-11 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
CVE-2020-17061 | High | 8.8 | 2020-11-11 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2020-17060 | Medium | 5.4 | 2020-11-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2020-17058 | High | 7.5 | 2020-11-11 | Microsoft Browser Memory Corruption Vulnerability |
CVE-2020-17057 | High | 7.0 | 2020-11-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2020-17056 | Medium | 5.5 | 2020-11-11 | Windows Network File System Information Disclosure Vulnerability |
CVE-2020-17055 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17054 | Medium | 4.2 | 2020-11-11 | Chakra Scripting Engine Memory Corruption Vulnerability |
CVE-2020-17053 | High | 7.5 | 2020-11-11 | Internet Explorer Memory Corruption Vulnerability |
CVE-2020-17052 | High | 7.5 | 2020-11-11 | Scripting Engine Memory Corruption Vulnerability |
CVE-2020-17051 | Critical | 9.8 | 2020-11-11 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2020-17049 | Medium | 6.6 | 2020-11-11 | A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos… |
CVE-2020-17048 | Medium | 4.2 | 2020-11-11 | Chakra Scripting Engine Memory Corruption Vulnerability |
CVE-2020-17047 | High | 7.5 | 2020-11-11 | Windows Network File System Denial of Service Vulnerability |
CVE-2020-17046 | Medium | 5.5 | 2020-11-11 | Windows Error Reporting Denial of Service Vulnerability |
CVE-2020-17045 | Medium | 5.5 | 2020-11-11 | Windows KernelStream Information Disclosure Vulnerability |
CVE-2020-17044 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17043 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17042 | High | 8.8 | 2020-11-11 | Windows Print Spooler Remote Code Execution Vulnerability |
CVE-2020-17041 | High | 7.8 | 2020-11-11 | Windows Print Configuration Elevation of Privilege Vulnerability |
CVE-2020-17040 | Medium | 6.5 | 2020-11-11 | Windows Hyper-V Security Feature Bypass Vulnerability |
CVE-2020-17038 | High | 7.8 | 2020-11-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2020-17037 | High | 7.8 | 2020-11-11 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2020-17036 | Medium | 5.5 | 2020-11-11 | Windows Function Discovery SSDP Provider Information Disclosure Vulnerability |
CVE-2020-17035 | High | 7.8 | 2020-11-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2020-17034 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17033 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17032 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17031 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17030 | Medium | 5.5 | 2020-11-11 | Windows MSCTF Server Information Disclosure Vulnerability |
CVE-2020-17029 | Medium | 5.5 | 2020-11-11 | Windows Canonical Display Driver Information Disclosure Vulnerability |
CVE-2020-17028 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17027 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17026 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17025 | High | 7.8 | 2020-11-11 | Windows Remote Access Elevation of Privilege Vulnerability |
CVE-2020-17024 | High | 7.8 | 2020-11-11 | Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability |
CVE-2020-17021 | Medium | 5.4 | 2020-11-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2020-17020 | Low | 3.3 | 2020-11-11 | Microsoft Word Security Feature Bypass Vulnerability |
CVE-2020-17019 | High | 7.8 | 2020-11-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2020-17018 | Medium | 5.4 | 2020-11-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2020-17017 | Medium | 5.3 | 2020-11-11 | Microsoft SharePoint Information Disclosure Vulnerability |
CVE-2020-17016 | High | 8.0 | 2020-11-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2020-17015 | Medium | 4.3 | 2020-11-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2020-17014 | High | 7.8 | 2020-11-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2020-17013 | Medium | 5.5 | 2020-11-11 | Win32k Information Disclosure Vulnerability |
CVE-2020-17012 | High | 7.8 | 2020-11-11 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2020-17011 | High | 7.8 | 2020-11-11 | Windows Port Class Library Elevation of Privilege Vulnerability |
CVE-2020-17010 | High | 7.8 | 2020-11-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2020-17007 | High | 7.0 | 2020-11-11 | Windows Error Reporting Elevation of Privilege Vulnerability |
CVE-2020-17006 | Medium | 5.4 | 2020-11-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2020-17005 | Medium | 5.4 | 2020-11-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2020-17004 | Medium | 5.5 | 2020-11-11 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2020-17001 | High | 7.8 | 2020-11-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2020-17000 | Medium | 5.5 | 2020-11-11 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2020-16999 | Medium | 5.5 | 2020-11-11 | Windows WalletService Information Disclosure Vulnerability |
CVE-2020-16998 | High | 7.0 | 2020-11-11 | DirectX Elevation of Privilege Vulnerability |
CVE-2020-16997 | High | 7.7 | 2020-11-11 | Remote Desktop Protocol Server Information Disclosure Vulnerability |
CVE-2020-16994 | High | 7.3 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16993 | Medium | 5.4 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16992 | High | 7.5 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16991 | High | 7.3 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16990 | Medium | 6.2 | 2020-11-11 | Azure Sphere Information Disclosure Vulnerability |
CVE-2020-16989 | Medium | 5.4 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16988 | Medium | 6.9 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16987 | High | 7.3 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16986 | Medium | 6.2 | 2020-11-11 | Azure Sphere Denial of Service Vulnerability |
CVE-2020-16985 | Medium | 6.2 | 2020-11-11 | Azure Sphere Information Disclosure Vulnerability |
CVE-2020-16984 | High | 7.3 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16983 | Medium | 5.7 | 2020-11-11 | Azure Sphere Tampering Vulnerability |
CVE-2020-16982 | Medium | 6.1 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16981 | Medium | 6.1 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16979 | Medium | 5.3 | 2020-11-11 | Microsoft SharePoint Information Disclosure Vulnerability |
CVE-2020-16970 | High | 8.1 | 2020-11-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2020-16127 | Low | 2.8 | 2020-11-11 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations… |
CVE-2020-16126 | Low | 3.3 | 2020-11-11 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing u… |
CVE-2020-25268 | High | 8.8 | 2020-11-10 | Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data. |
CVE-2020-25267 | Medium | 5.4 | 2020-11-10 | An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4. |
CVE-2020-28409 | Medium | 5.4 | 2020-11-10 | The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur. |
CVE-2020-28408 | Medium | 5.4 | 2020-11-10 | The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. |
CVE-2020-24367 | High | 7.8 | 2020-11-10 | Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by… |
CVE-2020-24063 | High | 7.2 | 2020-11-10 | The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. |
CVE-2020-23968 | High | 7.8 | 2020-11-10 | Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.lo… |
CVE-2020-28368 | Medium | 4.4 | 2020-11-10 | Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a powe… |
CVE-2020-28055 | High | 7.8 | 2020-11-10 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a… |
CVE-2020-27403 | Medium | 6.5 | 2020-11-10 | A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a… |
CVE-2020-27146 | Medium | 5.0 | 2020-11-10 | The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker w… |
CVE-2020-6316 | Medium | 4.3 | 2020-11-10 | SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Autho… |
CVE-2020-26824 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the U… |
CVE-2020-26823 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the U… |
CVE-2020-26822 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the O… |
CVE-2020-26821 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the S… |
CVE-2020-26820 | High | 7.2 | 2020-11-10 | SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, t… |
CVE-2020-26819 | High | 8.8 | 2020-11-10 | SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that… |
CVE-2020-26818 | High | 8.8 | 2020-11-10 | SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which… |
CVE-2020-26817 | High | 7.8 | 2020-11-10 | SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in crashing of the app… |
CVE-2020-26815 | High | 8.6 | 2020-11-10 | SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web… |
CVE-2020-26814 | Medium | 4.9 | 2020-11-10 | SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Modu… |