2020 CVEs (page 90)
Page 90 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15242 | Medium | 4.7 | 2020-10-08 | Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open… |
CVE-2020-1914 | Critical | 9.8 | 2020-10-08 | A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attack… |
CVE-2020-9048 | High | 7.1 | 2020-10-08 | A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker… |
CVE-2020-26802 | High | 8.8 | 2020-10-08 | forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET request to change the… |
CVE-2020-10816 | High | 7.5 | 2020-10-08 | Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet. |
CVE-2020-5389 | Medium | 6.5 | 2020-10-08 | Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerabilit… |
CVE-2020-4799 | High | 7.8 | 2020-10-08 | IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 18946… |
CVE-2020-4280 | High | 8.8 | 2020-10-08 | IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied cont… |
CVE-2020-24301 | Medium | 6.1 | 2020-10-08 | Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbitrary Java… |
CVE-2020-15646 | Medium | 5.9 | 2020-10-08 | If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attack… |
CVE-2020-13344 | Medium | 5.7 | 2020-10-08 | An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows… |
CVE-2020-13340 | High | 8.7 | 2020-10-08 | An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log |
CVE-2020-13339 | Medium | 5.5 | 2020-10-08 | An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the… |
CVE-2020-12401 | Medium | 4.7 | 2020-10-08 | During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time… |
CVE-2020-12400 | Medium | 4.7 | 2020-10-08 | When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side chan… |
CVE-2020-2298 | Medium | 6.5 | 2020-10-08 | Jenkins Nerrvana Plugin 1.02.06 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2020-2297 | Low | 3.3 | 2020-10-08 | Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be v… |
CVE-2020-2296 | Medium | 4.3 | 2020-10-08 | A cross-site request forgery (CSRF) vulnerability in Jenkins Shared Objects Plugin 0.44 and earlier allows attackers to configure shared objects. |
CVE-2020-2295 | Medium | 6.5 | 2020-10-08 | A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout… |
CVE-2020-2294 | Medium | 6.5 | 2020-10-08 | Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permi… |
CVE-2020-2293 | Medium | 6.5 | 2020-10-08 | Jenkins Persona Plugin 2.4 and earlier allows users with Overall/Read permission to read arbitrary files on the Jenkins controller. |
CVE-2020-2292 | Medium | 5.4 | 2020-10-08 | Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability… |
CVE-2020-2291 | Low | 3.3 | 2020-10-08 | Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it ca… |
CVE-2020-2290 | Medium | 5.4 | 2020-10-08 | Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored… |
CVE-2020-2289 | Medium | 5.4 | 2020-10-08 | Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS) vu… |
CVE-2020-2288 | Medium | 5.3 | 2020-10-08 | In Jenkins Audit Trail Plugin 3.6 and earlier, the default regular expression pattern could be bypassed in many cases by adding a suffix to the URL that would… |
CVE-2020-2287 | Medium | 5.3 | 2020-10-08 | Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for… |
CVE-2020-2286 | High | 8.8 | 2020-10-08 | Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting i… |
CVE-2020-26567 | Medium | 5.5 | 2020-10-08 | An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access rebo… |
CVE-2020-25273 | Critical | 9.8 | 2020-10-08 | In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection. |
CVE-2020-25272 | Medium | 6.1 | 2020-10-08 | In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php. |
CVE-2020-25271 | Medium | 5.4 | 2020-10-08 | PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.p… |
CVE-2020-25270 | Medium | 5.4 | 2020-10-08 | PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City. |
CVE-2020-25263 | High | 7.1 | 2020-10-08 | PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted. |
CVE-2020-25262 | Medium | 4.3 | 2020-10-08 | PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted. |
CVE-2020-3602 | Medium | 6.3 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-3601 | Medium | 4.4 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-3598 | Medium | 6.5 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confid… |
CVE-2020-3597 | Medium | 5.4 | 2020-10-08 | A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory… |
CVE-2020-3596 | Medium | 5.9 | 2020-10-08 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unau… |
CVE-2020-3589 | Medium | 4.8 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with admin… |
CVE-2020-3568 | Medium | 5.8 | 2020-10-08 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote… |
CVE-2020-3567 | Medium | 6.5 | 2020-10-08 | A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilizatio… |
CVE-2020-3544 | High | 8.8 | 2020-10-08 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent att… |
CVE-2020-3543 | Medium | 6.5 | 2020-10-08 | A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a… |
CVE-2020-3536 | Medium | 5.4 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site sc… |
CVE-2020-3535 | High | 7.8 | 2020-10-08 | A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a ma… |
CVE-2020-3467 | High | 7.7 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of… |
CVE-2020-3320 | Medium | 5.4 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-sit… |
CVE-2020-15501 | Medium | 6.5 | 2020-10-07 | Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button… |
CVE-2020-25867 | Medium | 5.3 | 2020-10-07 | SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication. |
CVE-2020-25768 | Medium | 5.3 | 2020-10-07 | Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms whic… |
CVE-2020-15226 | Medium | 5.0 | 2020-10-07 | In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break the SQL syntax, but it is also possible t… |
CVE-2020-7316 | Medium | 6.6 | 2020-10-07 | Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with highe… |
CVE-2020-26164 | Medium | 5.5 | 2020-10-07 | In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memor… |
CVE-2020-15217 | Medium | 5.3 | 2020-10-07 | In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As… |
CVE-2020-15177 | High | 8.0 | 2020-10-07 | In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`. These setting… |
CVE-2020-15176 | High | 8.7 | 2020-10-07 | In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL I… |
CVE-2020-15175 | High | 7.4 | 2020-10-07 | In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted… |
CVE-2020-26880 | High | 7.8 | 2020-10-07 | Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf configuration file (whi… |
CVE-2020-26876 | High | 7.5 | 2020-10-07 | The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by using the /… |
CVE-2020-17551 | Medium | 4.8 | 2020-10-07 | ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution. |
CVE-2020-26870 | Medium | 6.1 | 2020-10-07 | Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a na… |
CVE-2020-26596 | High | 8.8 | 2020-10-07 | The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Ed… |
CVE-2020-24246 | High | 7.5 | 2020-10-07 | Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin. |
CVE-2020-13342 | Low | 2.7 | 2020-10-07 | An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email |
CVE-2020-11800 | Critical | 9.8 | 2020-10-07 | Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. |
CVE-2020-24722 | Medium | 5.9 | 2020-10-07 | An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-10-05, as used in COVID-19 applications on Android and iOS… |
CVE-2020-14355 | Medium | 6.6 | 2020-10-07 | Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPIC… |
CVE-2020-25343 | Medium | 5.4 | 2020-10-07 | Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via even… |
CVE-2020-13347 | Critical | 9.1 | 2020-10-07 | A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows syste… |
CVE-2020-13346 | Medium | 6.5 | 2020-10-07 | Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential… |
CVE-2020-13335 | Medium | 4.3 | 2020-10-07 | Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their grou… |
CVE-2020-13334 | Medium | 5.9 | 2020-10-07 | In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attri… |
CVE-2020-25985 | High | 8.1 | 2020-10-07 | MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserver (php files can be unlinked and not d… |
CVE-2020-7742 | High | 7.5 | 2020-10-07 | This affects the package simpl-schema before 1.10.2. |
CVE-2020-14183 | Medium | 4.3 | 2020-10-06 | Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number… |
CVE-2020-26607 | Critical | 9.8 | 2020-10-06 | An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, a… |
CVE-2020-26606 | High | 7.5 | 2020-10-06 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can access certain Secure Folder content via… |
CVE-2020-26605 | High | 7.5 | 2020-10-06 | An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attackers to obtain sensitive information by… |
CVE-2020-26604 | High | 7.5 | 2020-10-06 | An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivileged process… |
CVE-2020-26603 | Medium | 5.3 | 2020-10-06 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivileged proc… |
CVE-2020-26602 | High | 7.5 | 2020-10-06 | An issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows sdcard access by… |
CVE-2020-26601 | High | 7.5 | 2020-10-06 | An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishand… |
CVE-2020-26600 | High | 7.5 | 2020-10-06 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2… |
CVE-2020-26599 | Medium | 5.3 | 2020-10-06 | An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The… |
CVE-2020-26598 | High | 7.5 | 2020-10-06 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to… |
CVE-2020-26597 | High | 7.5 | 2020-10-06 | An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The L… |
CVE-2020-16267 | High | 8.8 | 2020-10-06 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. |
CVE-2020-15927 | High | 8.8 | 2020-10-06 | Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module. |
CVE-2020-15239 | Low | 3.5 | 2020-10-06 | In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a… |
CVE-2020-13345 | Medium | 5.5 | 2020-10-06 | An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes |
CVE-2020-13343 | High | 7.5 | 2020-10-06 | An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template |
CVE-2020-13333 | Medium | 4.3 | 2020-10-06 | A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check whic… |
CVE-2020-7740 | High | 8.2 | 2020-10-06 | This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator… |
CVE-2020-24807 | High | 7.8 | 2020-10-06 | The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code b… |
CVE-2020-1907 | Critical | 9.8 | 2020-10-06 | A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsA… |
CVE-2020-1906 | High | 7.8 | 2020-10-06 | A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when… |
CVE-2020-1905 | Low | 3.3 | 2020-10-06 | Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have all… |
CVE-2020-1904 | Medium | 5.5 | 2020-10-06 | A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwr… |