2020 CVEs (page 80)
Page 80 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6829 | Medium | 5.3 | 2020-10-28 | When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during… |
CVE-2020-5145 | High | 8.6 | 2020-10-28 | SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead… |
CVE-2020-5144 | High | 7.8 | 2020-10-28 | SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking v… |
CVE-2020-27957 | Medium | 5.4 | 2020-10-28 | The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created with… |
CVE-2020-27956 | Critical | 9.8 | 2020-10-28 | An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via… |
CVE-2020-16140 | Medium | 6.1 | 2020-10-27 | The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS. |
CVE-2020-9982 | Medium | 5.5 | 2020-10-27 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application ma… |
CVE-2020-9979 | Medium | 5.5 | 2020-10-27 | A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust rel… |
CVE-2020-9973 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Securit… |
CVE-2020-9961 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Securi… |
CVE-2020-9941 | High | 7.5 | 2020-10-27 | This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mo… |
CVE-2020-9932 | High | 8.8 | 2020-10-27 | A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing malicious… |
CVE-2020-9866 | Critical | 9.8 | 2020-10-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update… |
CVE-2020-9860 | Medium | 5.4 | 2020-10-27 | A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. Processing a maliciously crafted URL may… |
CVE-2020-9857 | Medium | 4.3 | 2020-10-27 | An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Updat… |
CVE-2020-9786 | Low | 3.3 | 2020-10-27 | This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sie… |
CVE-2020-9782 | High | 7.5 | 2020-10-27 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update… |
CVE-2020-9774 | High | 7.5 | 2020-10-27 | An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fixed in macOS Catalin… |
CVE-2020-3880 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Cata… |
CVE-2020-3864 | High | 7.8 | 2020-10-27 | A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tv… |
CVE-2020-3863 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security… |
CVE-2020-3855 | High | 7.1 | 2020-10-27 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Updat… |
CVE-2020-3852 | Medium | 5.3 | 2020-10-27 | A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia… |
CVE-2020-3851 | High | 7.8 | 2020-10-27 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security… |
CVE-2020-27892 | High | 7.5 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response m… |
CVE-2020-27891 | High | 7.5 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response… |
CVE-2020-27890 | High | 8.2 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message… |
CVE-2020-27888 | High | 7.5 | 2020-10-27 | An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased fro… |
CVE-2020-27160 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04… |
CVE-2020-27159 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My… |
CVE-2020-27158 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114. |
CVE-2020-25765 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1… |
CVE-2020-12830 | Critical | 9.8 | 2020-10-27 | Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code ex… |
CVE-2020-15238 | High | 7.1 | 2020-10-27 | Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injecti… |
CVE-2020-7755 | High | 7.5 | 2020-10-27 | All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values. |
CVE-2020-27853 | Critical | 9.8 | 2020-10-27 | Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This af… |
CVE-2020-11858 | High | 7.8 | 2020-10-27 | Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility… |
CVE-2020-11854 | Critical | 9.8 | 2020-10-27 | Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Mi… |
CVE-2020-7754 | High | 7.5 | 2020-10-27 | This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning… |
CVE-2020-23945 | High | 7.5 | 2020-10-27 | A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data i… |
CVE-2020-8579 | High | 7.5 | 2020-10-27 | Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LIF to cause a Denia… |
CVE-2020-6023 | High | 7.8 | 2020-10-27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware. |
CVE-2020-6022 | Medium | 5.5 | 2020-10-27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. |
CVE-2020-23864 | High | 7.8 | 2020-10-27 | An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps fol… |
CVE-2020-10256 | Critical | 9.8 | 2020-10-27 | An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge prior to 0.7.3. An… |
CVE-2020-7753 | High | 7.5 | 2020-10-27 | All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim(). |
CVE-2020-8956 | Low | 3.3 | 2020-10-27 | Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled. |
CVE-2020-27183 | Critical | 9.8 | 2020-10-27 | A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send ar… |
CVE-2020-27182 | Medium | 6.1 | 2020-10-27 | Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaScript or HTML via a… |
CVE-2020-27181 | Medium | 6.5 | 2020-10-27 | A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt s… |
CVE-2020-27180 | High | 7.5 | 2020-10-27 | konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter. |
CVE-2020-27179 | Critical | 9.8 | 2020-10-27 | konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens. |
CVE-2020-15352 | High | 7.2 | 2020-10-27 | An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated ad… |
CVE-2020-27743 | Critical | 9.8 | 2020-10-26 | libtac in pam_tacplus through 1.5.1 lacks a check for a failure of RAND_bytes()/RAND_pseudo_bytes(). This could lead to use of a non-random/predictable session… |
CVE-2020-1915 | High | 7.5 | 2020-10-26 | An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a den… |
CVE-2020-26879 | Critical | 9.8 | 2020-10-26 | Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by… |
CVE-2020-26878 | High | 8.8 | 2020-10-26 | Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injec… |
CVE-2020-25034 | Medium | 6.5 | 2020-10-26 | eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search… |
CVE-2020-15274 | Medium | 5.8 | 2020-10-26 | In Wiki.js before version 2.5.162, an XSS payload can be injected in a page title and executed via the search results. While the title is properly escaped in b… |
CVE-2020-15272 | High | 8.7 | 2020-10-26 | In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if they can control the… |
CVE-2020-26566 | High | 7.5 | 2020-10-26 | A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the… |
CVE-2020-26161 | Medium | 6.1 | 2020-10-26 | In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header. |
CVE-2020-15271 | Critical | 9.3 | 2020-10-26 | In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that us… |
CVE-2020-7752 | High | 8.8 | 2020-10-26 | This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to o… |
CVE-2020-27187 | High | 7.8 | 2020-10-26 | An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-B… |
CVE-2020-7197 | Critical | 9.8 | 2020-10-26 | SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application an… |
CVE-2020-7196 | Medium | 6.5 | 2020-10-26 | The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that… |
CVE-2020-7127 | Critical | 9.8 | 2020-10-26 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7126 | Medium | 5.8 | 2020-10-26 | A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7125 | High | 8.8 | 2020-10-26 | A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7124 | Critical | 9.8 | 2020-10-26 | A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-6876 | Medium | 5.4 | 2020-10-26 | A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserti… |
CVE-2020-24632 | High | 7.2 | 2020-10-26 | A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-24631 | High | 7.2 | 2020-10-26 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-18766 | Critical | 9.6 | 2020-10-26 | A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands. |
CVE-2020-15897 | High | 7.5 | 2020-10-26 | Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect… |
CVE-2020-13100 | High | 7.5 | 2020-10-26 | Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to… |
CVE-2020-25470 | Medium | 6.1 | 2020-10-26 | AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in co… |
CVE-2020-7751 | Medium | 6.0 | 2020-10-26 | pathval before version 1.1.1 is vulnerable to prototype pollution. |
CVE-2020-27678 | Critical | 9.8 | 2020-10-26 | An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffe… |
CVE-2020-27388 | Medium | 5.4 | 2020-10-23 | Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plug… |
CVE-2020-24848 | High | 7.8 | 2020-10-23 | FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege e… |
CVE-2020-24847 | Medium | 4.3 | 2020-10-23 | A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthen… |
CVE-2020-5990 | High | 7.8 | 2020-10-23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation… |
CVE-2020-5978 | High | 7.8 | 2020-10-23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under norm… |
CVE-2020-5977 | High | 7.8 | 2020-10-23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search pat… |
CVE-2020-25483 | Critical | 9.8 | 2020-10-23 | An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server. |
CVE-2020-25466 | Critical | 9.8 | 2020-10-23 | A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitra… |
CVE-2020-3998 | Medium | 6.5 | 2020-10-23 | VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the mach… |
CVE-2020-3997 | Medium | 5.4 | 2020-10-23 | VMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS) vulnerability. Successful exploitation of this issue may allow an a… |
CVE-2020-27216 | High | 7.0 | 2020-10-23 | In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's… |
CVE-2020-26561 | High | 8.8 | 2020-10-23 | Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in mini_httpd. Success… |
CVE-2020-9361 | Medium | 5.5 | 2020-10-23 | CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode in… |
CVE-2020-9331 | High | 7.8 | 2020-10-23 | CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mo… |
CVE-2020-26887 | High | 7.8 | 2020-10-23 | FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. |
CVE-2020-15004 | Medium | 4.8 | 2020-10-23 | OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS. |
CVE-2020-15003 | Medium | 4.3 | 2020-10-23 | OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API… |
CVE-2020-15002 | Medium | 5.0 | 2020-10-23 | OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API. |
CVE-2020-15270 | Medium | 4.3 | 2020-10-22 | Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessi… |
CVE-2020-3996 | Medium | 5.5 | 2020-10-22 | Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users. |