2020 CVEs (page 86)
Page 86 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-16953 | Medium | 6.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exp… |
CVE-2020-16952 | High | 8.6 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attack… |
CVE-2020-16951 | High | 8.6 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attack… |
CVE-2020-16950 | Medium | 5.0 | 2020-10-16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exp… |
CVE-2020-16949 | Medium | 4.7 | 2020-10-16 | <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who success… |
CVE-2020-16948 | Medium | 6.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exp… |
CVE-2020-16947 | High | 7.5 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who suc… |
CVE-2020-16946 | High | 8.7 | 2020-10-16 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… |
CVE-2020-16945 | High | 8.7 | 2020-10-16 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… |
CVE-2020-16944 | High | 8.7 | 2020-10-16 | <p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.</p> <p>An authe… |
CVE-2020-16943 | Medium | 6.5 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability… |
CVE-2020-16942 | Medium | 4.1 | 2020-10-16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages… |
CVE-2020-16941 | Medium | 4.1 | 2020-10-16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages… |
CVE-2020-16940 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points. An attacker who successfu… |
CVE-2020-16939 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could r… |
CVE-2020-16938 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vul… |
CVE-2020-16937 | Medium | 4.7 | 2020-10-16 | <p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vuln… |
CVE-2020-16936 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16935 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability… |
CVE-2020-16934 | High | 7.0 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfull… |
CVE-2020-16933 | High | 7.0 | 2020-10-16 | <p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploite… |
CVE-2020-16932 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe… |
CVE-2020-16931 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe… |
CVE-2020-16930 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe… |
CVE-2020-16929 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe… |
CVE-2020-16928 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfull… |
CVE-2020-16927 | High | 7.5 | 2020-10-16 | <p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially craft… |
CVE-2020-16924 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploit… |
CVE-2020-16923 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited… |
CVE-2020-16922 | Medium | 5.3 | 2020-10-16 | <p>A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass s… |
CVE-2020-16921 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully e… |
CVE-2020-16920 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker… |
CVE-2020-16919 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker wh… |
CVE-2020-16918 | High | 7.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the v… |
CVE-2020-16916 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability… |
CVE-2020-16915 | High | 7.8 | 2020-10-16 | <p>A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vuln… |
CVE-2020-16914 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an atta… |
CVE-2020-16913 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who su… |
CVE-2020-16912 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16911 | High | 8.8 | 2020-10-16 | <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who succ… |
CVE-2020-16910 | Medium | 6.2 | 2020-10-16 | <p>A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create fil… |
CVE-2020-16909 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation… |
CVE-2020-16908 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories.</p> <p>A locally authenticated attacker could run arbitra… |
CVE-2020-16907 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who su… |
CVE-2020-16905 | Medium | 6.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation… |
CVE-2020-16904 | Medium | 5.3 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploite… |
CVE-2020-16902 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure l… |
CVE-2020-16901 | Medium | 5.0 | 2020-10-16 | <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an au… |
CVE-2020-16900 | High | 7.0 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.</p> <p>To exploit this vulnerability, an… |
CVE-2020-16899 | High | 7.5 | 2020-10-16 | <p>A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully… |
CVE-2020-16898 | High | 8.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfu… |
CVE-2020-16897 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attacker who successfu… |
CVE-2020-16896 | High | 7.5 | 2020-10-16 | <p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially… |
CVE-2020-16895 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploit… |
CVE-2020-16894 | High | 7.7 | 2020-10-16 | <p>A denial of service vulnerability exists when Windows Network Address Translation (NAT) on a host server fails to properly validate input from a privileged… |
CVE-2020-16892 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited th… |
CVE-2020-16891 | High | 8.8 | 2020-10-16 | <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest op… |
CVE-2020-16890 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited th… |
CVE-2020-16889 | Medium | 5.5 | 2020-10-16 | <p>An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited th… |
CVE-2020-16887 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successful… |
CVE-2020-16886 | Medium | 5.3 | 2020-10-16 | <p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (… |
CVE-2020-16885 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploite… |
CVE-2020-16877 | High | 7.1 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnera… |
CVE-2020-16876 | High | 7.1 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker… |
CVE-2020-16863 | High | 7.5 | 2020-10-16 | <p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially craf… |
CVE-2020-0764 | High | 7.8 | 2020-10-16 | <p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited t… |
CVE-2020-27194 | Medium | 5.5 | 2020-10-16 | An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values… |
CVE-2020-1689 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific layer 2 frame… |
CVE-2020-1688 | Medium | 6.5 | 2020-10-16 | On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to p… |
CVE-2020-1687 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, receipt of a… |
CVE-2020-1686 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigged by a mal… |
CVE-2020-1685 | Medium | 5.8 | 2020-10-16 | When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the discard a… |
CVE-2020-1684 | High | 7.5 | 2020-10-16 | On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilizat… |
CVE-2020-1683 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore). Prior to the kernel crash… |
CVE-2020-1682 | Medium | 5.5 | 2020-10-16 | An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) thro… |
CVE-2020-1681 | Medium | 6.5 | 2020-10-16 | Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp p… |
CVE-2020-1680 | Medium | 5.3 | 2020-10-16 | On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component… |
CVE-2020-1679 | High | 7.5 | 2020-10-16 | On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause… |
CVE-2020-1678 | Medium | 6.5 | 2020-10-16 | On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is e… |
CVE-2020-1677 | High | 7.2 | 2020-10-16 | When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to mo… |
CVE-2020-1676 | High | 7.2 | 2020-10-16 | When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML… |
CVE-2020-1675 | High | 8.3 | 2020-10-16 | When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certi… |
CVE-2020-1673 | High | 8.8 | 2020-10-16 | Insufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP/HTTPS) services allows an unauthenticated attacker to hijack t… |
CVE-2020-1672 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon… |
CVE-2020-1671 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JD… |
CVE-2020-1670 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to network protoc… |
CVE-2020-1669 | Medium | 6.3 | 2020-10-16 | The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes i… |
CVE-2020-1668 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traff… |
CVE-2020-1667 | High | 8.3 | 2020-10-16 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1666 | Medium | 6.6 | 2020-10-16 | The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console ca… |
CVE-2020-1665 | Medium | 5.3 | 2020-10-16 | On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it… |
CVE-2020-1664 | High | 7.8 | 2020-10-16 | A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of S… |
CVE-2020-1662 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon (RPD) crash and restart, limiting the atta… |
CVE-2020-1661 | Medium | 5.3 | 2020-10-16 | On Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon (jdhcp) process might cras… |
CVE-2020-1660 | High | 8.3 | 2020-10-16 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1657 | High | 7.5 | 2020-10-16 | On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to I… |
CVE-2020-1656 | High | 8.8 | 2020-10-16 | The DHCPv6 Relay-Agent service, part of the Juniper Enhanced jdhcpd daemon shipped with Juniper Networks Junos OS has an Improper Input Validation vulnerabilit… |
CVE-2020-25214 | High | 8.1 | 2020-10-16 | In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint. |
CVE-2020-26183 | Medium | 6.8 | 2020-10-16 | Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulner… |
CVE-2020-26182 | Medium | 6.8 | 2020-10-16 | Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remote user with low privileges may exploit t… |