2020 CVEs (page 85)
Page 85 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7194 | High | 8.8 | 2020-10-19 | A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version… |
CVE-2020-7193 | High | 8.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7192 | High | 8.8 | 2020-10-19 | A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7191 | High | 8.8 | 2020-10-19 | A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to i… |
CVE-2020-7190 | High | 8.8 | 2020-10-19 | A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7189 | High | 8.8 | 2020-10-19 | A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7188 | High | 8.8 | 2020-10-19 | A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-7187 | High | 8.8 | 2020-10-19 | A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7186 | High | 8.8 | 2020-10-19 | A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-7185 | High | 8.8 | 2020-10-19 | A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7184 | High | 8.8 | 2020-10-19 | A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ver… |
CVE-2020-7183 | High | 8.8 | 2020-10-19 | A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7182 | High | 8.8 | 2020-10-19 | A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iM… |
CVE-2020-7181 | High | 8.8 | 2020-10-19 | A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7180 | High | 8.8 | 2020-10-19 | A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7179 | High | 8.8 | 2020-10-19 | A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7178 | High | 8.8 | 2020-10-19 | A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7177 | High | 8.8 | 2020-10-19 | A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7176 | High | 8.8 | 2020-10-19 | A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7175 | High | 8.8 | 2020-10-19 | A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7174 | High | 8.8 | 2020-10-19 | A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7173 | High | 8.8 | 2020-10-19 | A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7172 | Critical | 9.8 | 2020-10-19 | A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7171 | Critical | 9.8 | 2020-10-19 | A guidatadetail expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-7170 | Critical | 9.8 | 2020-10-19 | A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-7169 | Critical | 9.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7168 | Critical | 9.8 | 2020-10-19 | A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7167 | Critical | 9.8 | 2020-10-19 | A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7166 | Critical | 9.8 | 2020-10-19 | A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ve… |
CVE-2020-7165 | Critical | 9.8 | 2020-10-19 | A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7164 | Critical | 9.8 | 2020-10-19 | A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7163 | Critical | 9.8 | 2020-10-19 | A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7162 | Critical | 9.8 | 2020-10-19 | A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versio… |
CVE-2020-7161 | Critical | 9.8 | 2020-10-19 | A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7160 | Critical | 9.8 | 2020-10-19 | A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7159 | Critical | 9.8 | 2020-10-19 | A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7158 | Critical | 9.8 | 2020-10-19 | A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7157 | Critical | 9.8 | 2020-10-19 | A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7156 | Critical | 9.8 | 2020-10-19 | A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7155 | Critical | 9.8 | 2020-10-19 | A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-7154 | Critical | 9.8 | 2020-10-19 | A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7153 | Critical | 9.8 | 2020-10-19 | A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7152 | Critical | 9.8 | 2020-10-19 | A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-7151 | Critical | 9.8 | 2020-10-19 | A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7150 | Critical | 9.8 | 2020-10-19 | A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7149 | Critical | 9.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7148 | Critical | 9.8 | 2020-10-19 | A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7147 | Critical | 9.8 | 2020-10-19 | A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7146 | Critical | 9.8 | 2020-10-19 | A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7145 | Critical | 9.8 | 2020-10-19 | A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7144 | Critical | 9.8 | 2020-10-19 | A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pr… |
CVE-2020-7143 | Critical | 9.8 | 2020-10-19 | A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7142 | Critical | 9.8 | 2020-10-19 | A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7141 | Critical | 9.8 | 2020-10-19 | A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-24652 | Critical | 9.8 | 2020-10-19 | A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-24651 | Critical | 9.8 | 2020-10-19 | A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-24650 | Critical | 9.8 | 2020-10-19 | A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-24649 | Critical | 9.8 | 2020-10-19 | A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-24648 | Critical | 9.8 | 2020-10-19 | A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ve… |
CVE-2020-24647 | Critical | 9.8 | 2020-10-19 | A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-24646 | Critical | 9.8 | 2020-10-19 | A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC… |
CVE-2020-24630 | High | 8.8 | 2020-10-19 | A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT… |
CVE-2020-24629 | Critical | 9.8 | 2020-10-19 | A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E… |
CVE-2020-16161 | High | 7.5 | 2020-10-19 | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash. |
CVE-2020-16160 | High | 7.5 | 2020-10-19 | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash. |
CVE-2020-16159 | Critical | 9.1 | 2020-10-19 | GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or information disclosure. |
CVE-2020-16158 | High | 8.8 | 2020-10-19 | GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result in a crash or poten… |
CVE-2020-26891 | Medium | 6.1 | 2020-10-19 | AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to… |
CVE-2020-24266 | High | 7.5 | 2020-10-19 | An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denia… |
CVE-2020-24265 | High | 7.5 | 2020-10-19 | An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and… |
CVE-2020-8929 | Medium | 5.3 | 2020-10-19 | A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext… |
CVE-2020-15910 | Medium | 4.7 | 2020-10-19 | SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascrip… |
CVE-2020-15909 | High | 8.8 | 2020-10-19 | SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookie attribute is not… |
CVE-2020-13778 | High | 8.8 | 2020-10-19 | rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or l… |
CVE-2020-7745 | High | 7.1 | 2020-10-19 | This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral… |
CVE-2020-13893 | Medium | 5.4 | 2020-10-18 | Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via m… |
CVE-2020-27197 | Critical | 9.8 | 2020-10-17 | TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse met… |
CVE-2020-1243 | High | 7.8 | 2020-10-16 | <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest o… |
CVE-2020-1167 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited… |
CVE-2020-1080 | High | 8.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfull… |
CVE-2020-1047 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfull… |
CVE-2020-17023 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who succ… |
CVE-2020-17022 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploi… |
CVE-2020-17003 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the v… |
CVE-2020-16995 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vul… |
CVE-2020-16980 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploi… |
CVE-2020-16978 | Medium | 5.4 | 2020-10-16 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16977 | High | 7.0 | 2020-10-16 | <p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exp… |
CVE-2020-16976 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16975 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16974 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16973 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16972 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16969 | High | 7.1 | 2020-10-16 | <p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully explo… |
CVE-2020-16968 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-16967 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-16957 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who succ… |
CVE-2020-16956 | Medium | 5.4 | 2020-10-16 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16955 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfull… |
CVE-2020-16954 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who succ… |