2020 CVEs (page 98)
Page 98 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9745 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-9744 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-9739 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-7358 | Medium | 5.8 | 2020-09-18 | In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker w… |
CVE-2020-5976 | High | 7.5 | 2020-09-18 | NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in the application soft… |
CVE-2020-5975 | High | 7.5 | 2020-09-18 | NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive informa… |
CVE-2020-15958 | High | 8.6 | 2020-09-18 | An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various… |
CVE-2020-15773 | Medium | 6.5 | 2020-09-18 | An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker ca… |
CVE-2020-0354 | Critical | 9.8 | 2020-09-18 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution priv… |
CVE-2020-0318 | Medium | 5.5 | 2020-09-18 | In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execut… |
CVE-2020-0262 | High | 7.8 | 2020-09-18 | In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User ex… |
CVE-2020-0089 | High | 7.8 | 2020-09-18 | In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional executio… |
CVE-2020-15776 | High | 8.8 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An a… |
CVE-2020-15775 | High | 7.5 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level build information such as project names… |
CVE-2020-15774 | Medium | 6.8 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a user who has recently logged in to Gradle… |
CVE-2020-15772 | Medium | 4.9 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a SAML identity provider, an XML metadata… |
CVE-2020-15771 | High | 7.5 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows… |
CVE-2020-15770 | Medium | 5.5 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a local user's password, due to lack of lock-o… |
CVE-2020-15769 | Medium | 6.1 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL. |
CVE-2020-15768 | High | 7.5 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestricted HTTP header reflection in Gradle… |
CVE-2020-15767 | Medium | 5.3 | 2020-09-18 | An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is not annotated with the “secure” attribute… |
CVE-2020-5629 | Medium | 6.5 | 2020-09-18 | UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the thir… |
CVE-2020-5628 | Medium | 6.5 | 2020-09-18 | UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if… |
CVE-2020-5606 | Medium | 6.1 | 2020-09-18 | Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page. |
CVE-2020-5605 | Medium | 4.3 | 2020-09-18 | Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecifi… |
CVE-2020-25756 | Critical | 9.8 | 2020-09-18 | A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can… |
CVE-2020-25751 | High | 8.8 | 2020-09-18 | The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=comments filter_published parameter. |
CVE-2020-25750 | High | 7.5 | 2020-09-18 | An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is an XXE vulnerability in the checkResult… |
CVE-2020-25744 | High | 8.1 | 2020-09-18 | SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service (DoS) conditi… |
CVE-2020-25735 | Medium | 6.1 | 2020-09-18 | webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, a… |
CVE-2020-25734 | Medium | 5.3 | 2020-09-18 | webTareas through 2.1 allows files/Default/ Directory Listing. |
CVE-2020-25733 | High | 7.5 | 2020-09-18 | webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. |
CVE-2020-15187 | Low | 3.0 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, t… |
CVE-2020-15186 | Low | 3.4 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name… |
CVE-2020-15185 | Low | 2.2 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compro… |
CVE-2020-15184 | Low | 3.7 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized. This could lead to the injecti… |
CVE-2020-0426 | Medium | 5.5 | 2020-09-17 | In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execut… |
CVE-2020-0425 | Medium | 5.5 | 2020-09-17 | There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execut… |
CVE-2020-0406 | High | 7.8 | 2020-09-17 | In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allo… |
CVE-2020-0375 | High | 7.8 | 2020-09-17 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supp… |
CVE-2020-0374 | High | 7.8 | 2020-09-17 | In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges n… |
CVE-2020-0373 | Medium | 4.7 | 2020-09-17 | In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional ex… |
CVE-2020-0372 | Medium | 5.5 | 2020-09-17 | In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no add… |
CVE-2020-0370 | Medium | 6.5 | 2020-09-17 | In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2020-0369 | High | 7.8 | 2020-09-17 | In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2020-0366 | High | 7.8 | 2020-09-17 | In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app se… |
CVE-2020-0364 | Medium | 6.5 | 2020-09-17 | In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2020-0363 | Medium | 6.5 | 2020-09-17 | In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution… |
CVE-2020-0362 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0361 | Medium | 6.5 | 2020-09-17 | In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional executi… |
CVE-2020-0360 | High | 7.8 | 2020-09-17 | In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with Us… |
CVE-2020-0359 | Medium | 5.5 | 2020-09-17 | In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execut… |
CVE-2020-0358 | Medium | 6.4 | 2020-09-17 | In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0357 | High | 7.8 | 2020-09-17 | In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no… |
CVE-2020-0356 | Medium | 6.7 | 2020-09-17 | In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… |
CVE-2020-0355 | Medium | 6.5 | 2020-09-17 | In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional… |
CVE-2020-0353 | Medium | 6.5 | 2020-09-17 | In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execu… |
CVE-2020-0352 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution pri… |
CVE-2020-0351 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution… |
CVE-2020-0346 | High | 7.8 | 2020-09-17 | In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization we… |
CVE-2020-0345 | High | 7.8 | 2020-09-17 | In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution p… |
CVE-2020-0344 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution pri… |
CVE-2020-0343 | Medium | 5.5 | 2020-09-17 | In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no… |
CVE-2020-0341 | High | 7.8 | 2020-09-17 | In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2020-0340 | Medium | 6.5 | 2020-09-17 | In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additi… |
CVE-2020-0338 | Medium | 5.0 | 2020-09-17 | In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution pri… |
CVE-2020-0337 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execut… |
CVE-2020-0336 | Medium | 6.7 | 2020-09-17 | In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges… |
CVE-2020-0333 | Critical | 9.8 | 2020-09-17 | In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. U… |
CVE-2020-0332 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privile… |
CVE-2020-0330 | Medium | 6.7 | 2020-09-17 | In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execut… |
CVE-2020-0329 | Medium | 5.5 | 2020-09-17 | In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional… |
CVE-2020-0328 | Medium | 4.4 | 2020-09-17 | In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privile… |
CVE-2020-0324 | Medium | 6.5 | 2020-09-17 | In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execut… |
CVE-2020-0323 | Medium | 5.5 | 2020-09-17 | In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution p… |
CVE-2020-0322 | Medium | 4.4 | 2020-09-17 | In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2020-0321 | High | 8.8 | 2020-09-17 | In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution… |
CVE-2020-0320 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0317 | Medium | 5.5 | 2020-09-17 | In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no a… |
CVE-2020-0314 | Medium | 5.5 | 2020-09-17 | In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privi… |
CVE-2020-0312 | Medium | 5.5 | 2020-09-17 | In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pri… |
CVE-2020-0308 | Medium | 5.5 | 2020-09-17 | In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pr… |
CVE-2020-0306 | High | 7.8 | 2020-09-17 | In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no… |
CVE-2020-0303 | High | 8.8 | 2020-09-17 | In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no add… |
CVE-2020-0301 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0297 | Medium | 5.5 | 2020-09-17 | In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execut… |
CVE-2020-0296 | Medium | 5.5 | 2020-09-17 | In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User e… |
CVE-2020-0293 | Medium | 5.5 | 2020-09-17 | In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure wi… |
CVE-2020-0290 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges ne… |
CVE-2020-0289 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges ne… |
CVE-2020-0288 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution pri… |
CVE-2020-0287 | Medium | 6.5 | 2020-09-17 | In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execu… |
CVE-2020-0279 | Medium | 6.5 | 2020-09-17 | In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional ex… |
CVE-2020-0277 | High | 7.8 | 2020-09-17 | In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allo… |
CVE-2020-0275 | High | 7.8 | 2020-09-17 | In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This c… |
CVE-2020-0274 | Medium | 5.5 | 2020-09-17 | In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no additional… |
CVE-2020-0270 | Medium | 6.5 | 2020-09-17 | In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2020-0267 | High | 7.8 | 2020-09-17 | In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a… |
CVE-2020-0266 | High | 7.8 | 2020-09-17 | In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additio… |
CVE-2020-0264 | High | 8.8 | 2020-09-17 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution pr… |