2020 CVEs (page 92)
Page 92 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25623 | High | 7.5 | 2020-10-02 | Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if http… |
CVE-2020-8110 | Medium | 5.9 | 2020-10-02 | A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a point… |
CVE-2020-7738 | High | 8.3 | 2020-10-02 | All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its… |
CVE-2020-7737 | High | 7.3 | 2020-10-02 | All versions of package safetydance are vulnerable to Prototype Pollution via the set function. |
CVE-2020-7736 | High | 7.3 | 2020-10-02 | The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function. |
CVE-2020-26135 | Medium | 6.1 | 2020-10-02 | Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO. |
CVE-2020-26134 | Medium | 6.1 | 2020-10-02 | Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. |
CVE-2020-26124 | High | 8.8 | 2020-10-02 | openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_e… |
CVE-2020-25741 | Low | 3.2 | 2020-10-02 | fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive. |
CVE-2020-24698 | Critical | 9.8 | 2020-10-02 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able t… |
CVE-2020-24697 | High | 7.5 | 2020-10-02 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a den… |
CVE-2020-24696 | High | 8.1 | 2020-10-02 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a r… |
CVE-2020-17482 | Medium | 4.3 | 2020-10-02 | An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be… |
CVE-2020-17382 | High | 7.8 | 2020-10-02 | The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). |
CVE-2020-14294 | Medium | 6.1 | 2020-10-02 | An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global n… |
CVE-2020-14293 | High | 7.5 | 2020-10-02 | conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the… |
CVE-2020-13168 | Medium | 6.1 | 2020-10-02 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. |
CVE-2020-12127 | High | 7.5 | 2020-10-02 | An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak rout… |
CVE-2020-12126 | Critical | 9.8 | 2020-10-02 | Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, c… |
CVE-2020-12125 | Critical | 9.8 | 2020-10-02 | A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitra… |
CVE-2020-12124 | Critical | 9.8 | 2020-10-02 | A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arb… |
CVE-2020-12123 | High | 8.1 | 2020-10-02 | CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these… |
CVE-2020-26540 | High | 7.5 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, c… |
CVE-2020-26539 | Critical | 9.8 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field di… |
CVE-2020-26538 | High | 7.8 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the curren… |
CVE-2020-26537 | Critical | 9.8 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color c… |
CVE-2020-26536 | Medium | 5.5 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document. |
CVE-2020-26535 | Critical | 9.8 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index val… |
CVE-2020-26534 | Critical | 9.8 | 2020-10-02 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions… |
CVE-2020-26524 | Medium | 5.3 | 2020-10-02 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. |
CVE-2020-26523 | Medium | 6.1 | 2020-10-02 | Froala Editor before 3.2.2 allows XSS via pasted content. |
CVE-2020-26519 | Medium | 5.5 | 2020-10-02 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service. |
CVE-2020-26518 | Critical | 9.8 | 2020-10-02 | Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_generator.php session_id… |
CVE-2020-26511 | High | 7.5 | 2020-10-02 | The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass. |
CVE-2020-9491 | High | 7.5 | 2020-10-01 | In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like Liste… |
CVE-2020-9487 | High | 7.5 | 2020-10-01 | In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a do… |
CVE-2020-9486 | High | 7.5 | 2020-10-01 | In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, t… |
CVE-2020-5789 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. |
CVE-2020-5788 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/… |
CVE-2020-5787 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/service… |
CVE-2020-5786 | High | 8.8 | 2020-10-01 | Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate use… |
CVE-2020-5785 | Medium | 6.1 | 2020-10-01 | Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a cra… |
CVE-2020-5784 | Medium | 6.5 | 2020-10-01 | Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbit… |
CVE-2020-5387 | Low | 2.3 | 2020-10-01 | Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this… |
CVE-2020-14223 | Medium | 6.1 | 2020-10-01 | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS att… |
CVE-2020-13940 | Medium | 5.5 | 2020-10-01 | In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators t… |
CVE-2020-11979 | High | 7.5 | 2020-10-01 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access the… |
CVE-2020-15678 | High | 8.8 | 2020-10-01 | When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the… |
CVE-2020-15677 | Medium | 6.1 | 2020-10-01 | By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original s… |
CVE-2020-15676 | Medium | 6.1 | 2020-10-01 | Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attack… |
CVE-2020-15675 | High | 8.8 | 2020-10-01 | When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability aff… |
CVE-2020-15674 | High | 8.8 | 2020-10-01 | Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2020-15673 | High | 8.8 | 2020-10-01 | Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2020-15671 | Low | 3.1 | 2020-10-01 | When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting i… |
CVE-2020-15670 | High | 8.8 | 2020-10-01 | Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that w… |
CVE-2020-15669 | High | 8.8 | 2020-10-01 | When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we… |
CVE-2020-15668 | Medium | 4.3 | 2020-10-01 | A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and F… |
CVE-2020-15667 | High | 8.8 | 2020-10-01 | When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption… |
CVE-2020-15666 | Medium | 6.5 | 2020-10-01 | When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message… |
CVE-2020-15665 | Medium | 4.3 | 2020-10-01 | Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect… |
CVE-2020-15664 | Medium | 6.5 | 2020-10-01 | By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would… |
CVE-2020-15663 | High | 8.8 | 2020-10-01 | If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privilege… |
CVE-2020-15533 | Critical | 9.8 | 2020-10-01 | In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthentica… |
CVE-2020-15227 | High | 8.7 | 2020-10-01 | Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL th… |
CVE-2020-25200 | Medium | 5.3 | 2020-10-01 | Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 40… |
CVE-2020-15228 | Low | 3.5 | 2020-10-01 | In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a… |
CVE-2020-25018 | High | 7.5 | 2020-10-01 | Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. |
CVE-2020-25017 | High | 8.3 | 2020-10-01 | Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not re… |
CVE-2020-24620 | High | 7.8 | 2020-10-01 | Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials. |
CVE-2020-16844 | Medium | 6.8 | 2020-10-01 | In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *… |
CVE-2020-4576 | High | 7.5 | 2020-10-01 | IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequ… |
CVE-2020-25990 | Critical | 9.8 | 2020-10-01 | WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacke… |
CVE-2020-24861 | Medium | 5.4 | 2020-10-01 | GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page |
CVE-2020-24860 | Medium | 5.4 | 2020-10-01 | CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fiel… |
CVE-2020-8109 | Medium | 5.9 | 2020-10-01 | A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past… |
CVE-2020-6654 | High | 7.8 | 2020-09-30 | A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replac… |
CVE-2020-25830 | Medium | 4.8 | 2020-09-30 | An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, ac… |
CVE-2020-25781 | Medium | 4.3 | 2020-09-30 | An issue was discovered in file_download.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the (supposedly p… |
CVE-2020-25288 | Medium | 4.8 | 2020-09-30 | An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used… |
CVE-2020-16234 | High | 7.8 | 2020-09-30 | In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, whic… |
CVE-2020-13952 | High | 8.1 | 2020-09-30 | In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could acce… |
CVE-2020-13336 | Medium | 4.0 | 2020-09-30 | An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature. |
CVE-2020-12870 | Critical | 9.8 | 2020-09-30 | RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page. |
CVE-2020-12869 | Medium | 5.4 | 2020-09-30 | RainbowFish PacsOne Server 6.8.4 allows XSS. |
CVE-2020-12715 | High | 8.8 | 2020-09-30 | RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control. |
CVE-2020-25816 | Medium | 6.8 | 2020-09-30 | HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was not sche… |
CVE-2020-25626 | Medium | 6.1 | 2020-09-30 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to proper… |
CVE-2020-14374 | High | 8.8 | 2020-09-30 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing… |
CVE-2020-15849 | High | 7.2 | 2020-09-30 | Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A malicious actor with… |
CVE-2020-15488 | High | 7.5 | 2020-09-30 | Re:Desk 2.3 allows insecure file upload. |
CVE-2020-14378 | Low | 3.3 | 2020-09-30 | An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in… |
CVE-2020-14377 | High | 7.1 | 2020-09-30 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer o… |
CVE-2020-14376 | High | 7.8 | 2020-09-30 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memo… |
CVE-2020-14375 | High | 7.8 | 2020-09-30 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessib… |
CVE-2020-8256 | Medium | 4.9 | 2020-09-30 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through P… |
CVE-2020-8243 | High | 7.2 | 2020-09-30 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitra… |
CVE-2020-8238 | Medium | 6.1 | 2020-09-30 | A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site S… |
CVE-2020-26163 | High | 8.8 | 2020-09-30 | BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password… |
CVE-2020-26160 | High | 7.5 | 2020-09-30 | jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specif… |
CVE-2020-26158 | Critical | 9.6 | 2020-09-30 | Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because… |