2020 CVEs (page 99)
Page 99 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0130 | High | 7.8 | 2020-09-17 | In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with… |
CVE-2020-0125 | Medium | 5.5 | 2020-09-17 | In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution… |
CVE-2020-15183 | High | 8.4 | 2020-09-17 | SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows… |
CVE-2020-15182 | High | 8.4 | 2020-09-17 | The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0… |
CVE-2020-13260 | Medium | 6.1 | 2020-09-17 | A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated attacker to upload a JavaScript file, w… |
CVE-2020-25216 | Critical | 9.8 | 2020-09-17 | yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet. |
CVE-2020-25215 | Critical | 9.8 | 2020-09-17 | yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document. |
CVE-2020-24750 | High | 8.1 | 2020-09-17 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.confi… |
CVE-2020-0434 | High | 7.8 | 2020-09-17 | In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no ad… |
CVE-2020-0433 | High | 7.8 | 2020-09-17 | In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit… |
CVE-2020-0432 | High | 7.8 | 2020-09-17 | In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no a… |
CVE-2020-0431 | Medium | 6.7 | 2020-09-17 | In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a… |
CVE-2020-0430 | High | 7.8 | 2020-09-17 | In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege wi… |
CVE-2020-0429 | Medium | 6.7 | 2020-09-17 | In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation o… |
CVE-2020-0428 | Medium | 6.4 | 2020-09-17 | In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges req… |
CVE-2020-0427 | Medium | 5.5 | 2020-09-17 | In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional… |
CVE-2020-0403 | Medium | 6.7 | 2020-09-17 | In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privil… |
CVE-2020-0387 | High | 7.8 | 2020-09-17 | In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of pr… |
CVE-2020-25729 | Medium | 6.1 | 2020-09-17 | ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. |
CVE-2020-25489 | Critical | 9.8 | 2020-09-17 | A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption. |
CVE-2020-24753 | Critical | 9.8 | 2020-09-17 | A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted… |
CVE-2020-13169 | Critical | 9.0 | 2020-09-17 | Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to th… |
CVE-2020-25728 | High | 8.8 | 2020-09-17 | The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user's account p… |
CVE-2020-25727 | High | 7.5 | 2020-09-17 | The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input fie… |
CVE-2020-25490 | High | 7.3 | 2020-09-17 | Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution in… |
CVE-2020-24046 | High | 7.2 | 2020-09-17 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number o… |
CVE-2020-24045 | High | 7.2 | 2020-09-17 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number o… |
CVE-2020-11804 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur… |
CVE-2020-11803 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP… |
CVE-2020-11700 | Medium | 6.5 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retriev… |
CVE-2020-11699 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote c… |
CVE-2020-11698 | Critical | 9.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to… |
CVE-2020-0407 | Medium | 4.4 | 2020-09-17 | In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs… |
CVE-2020-0404 | Medium | 5.5 | 2020-09-17 | In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of priv… |
CVE-2020-0401 | High | 7.8 | 2020-09-17 | In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting sp… |
CVE-2020-0399 | Medium | 5.5 | 2020-09-17 | In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to… |
CVE-2020-0397 | Medium | 5.5 | 2020-09-17 | In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local in… |
CVE-2020-0396 | Medium | 5.5 | 2020-09-17 | In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User… |
CVE-2020-0395 | Medium | 5.5 | 2020-09-17 | In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local inform… |
CVE-2020-0394 | High | 7.8 | 2020-09-17 | In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of priv… |
CVE-2020-0393 | Medium | 5.5 | 2020-09-17 | In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2020-0392 | High | 7.8 | 2020-09-17 | In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no a… |
CVE-2020-0391 | High | 7.8 | 2020-09-17 | In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead… |
CVE-2020-0390 | Medium | 5.5 | 2020-09-17 | In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges ne… |
CVE-2020-0389 | Medium | 5.5 | 2020-09-17 | In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information… |
CVE-2020-0388 | High | 7.8 | 2020-09-17 | In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This co… |
CVE-2020-0386 | Medium | 5.5 | 2020-09-17 | In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of p… |
CVE-2020-0385 | Medium | 5.5 | 2020-09-17 | In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the… |
CVE-2020-0384 | Medium | 5.5 | 2020-09-17 | In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the m… |
CVE-2020-0383 | Medium | 5.5 | 2020-09-17 | In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the medi… |
CVE-2020-0382 | Low | 2.3 | 2020-09-17 | In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug r… |
CVE-2020-0381 | High | 7.5 | 2020-09-17 | In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly c… |
CVE-2020-0380 | Critical | 9.8 | 2020-09-17 | In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no ad… |
CVE-2020-0379 | Medium | 5.7 | 2020-09-17 | In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information w… |
CVE-2020-0342 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576 |
CVE-2020-0278 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574 |
CVE-2020-0245 | High | 8.8 | 2020-09-17 | In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information… |
CVE-2020-0229 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725 |
CVE-2020-0123 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 |
CVE-2020-0074 | High | 7.8 | 2020-09-17 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary d… |
CVE-2020-14338 | Medium | 5.3 | 2020-09-17 | A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use… |
CVE-2020-13944 | Medium | 6.1 | 2020-09-17 | In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. |
CVE-2020-6116 | High | 7.8 | 2020-09-17 | An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a… |
CVE-2020-6115 | High | 7.8 | 2020-09-17 | An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searching for a… |
CVE-2020-6113 | High | 7.8 | 2020-09-17 | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-referenc… |
CVE-2020-6112 | High | 7.8 | 2020-09-17 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding… |
CVE-2020-13948 | High | 8.8 | 2020-09-17 | While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in… |
CVE-2020-8028 | Critical | 9.3 | 2020-09-17 | A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE… |
CVE-2020-14181 | Medium | 5.3 | 2020-09-17 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the… |
CVE-2020-24377 | Critical | 9.6 | 2020-09-16 | A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3. |
CVE-2020-24376 | Critical | 9.6 | 2020-09-16 | A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3. |
CVE-2020-24374 | Critical | 9.6 | 2020-09-16 | A DNS rebinding vulnerability in Freebox v5 before 1.5.29. |
CVE-2020-24373 | High | 8.8 | 2020-09-16 | A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
CVE-2020-20406 | Medium | 5.4 | 2020-09-16 | A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by i… |
CVE-2020-16233 | High | 7.5 | 2020-09-16 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap. |
CVE-2020-14519 | High | 7.5 | 2020-09-16 | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer… |
CVE-2020-14517 | Critical | 9.8 | 2020-09-16 | Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is r… |
CVE-2020-14515 | High | 7.5 | 2020-09-16 | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mec… |
CVE-2020-14513 | High | 7.5 | 2020-09-16 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields. |
CVE-2020-14509 | Critical | 9.8 | 2020-09-16 | Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An… |
CVE-2020-6781 | Medium | 6.8 | 2020-09-16 | Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept vide… |
CVE-2020-6146 | High | 8.8 | 2020-09-16 | An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page… |
CVE-2020-1694 | Medium | 4.9 | 2020-09-16 | A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users… |
CVE-2020-13259 | High | 8.8 | 2020-09-16 | A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct a… |
CVE-2020-10718 | High | 7.5 | 2020-09-16 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classload… |
CVE-2020-25040 | High | 8.8 | 2020-09-16 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulner… |
CVE-2020-25039 | High | 8.1 | 2020-09-16 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution. |
CVE-2020-25015 | Medium | 6.5 | 2020-09-16 | A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to… |
CVE-2020-14348 | Medium | 4.3 | 2020-09-16 | It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inco… |
CVE-2020-14306 | High | 8.8 | 2020-09-16 | An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacke… |
CVE-2020-13928 | Medium | 6.1 | 2020-09-16 | Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it trig… |
CVE-2020-10748 | Medium | 6.1 | 2020-09-16 | A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker… |
CVE-2020-10715 | Medium | 4.3 | 2020-09-16 | A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text onto th… |
CVE-2020-3990 | Medium | 6.5 | 2020-09-16 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in… |
CVE-2020-3989 | Low | 3.3 | 2020-09-16 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Co… |
CVE-2020-3988 | Medium | 6.1 | 2020-09-16 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG200… |
CVE-2020-3987 | Medium | 6.1 | 2020-09-16 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STR… |
CVE-2020-3986 | Medium | 6.1 | 2020-09-16 | VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Par… |
CVE-2020-3980 | Medium | 6.7 | 2020-09-16 | VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user priv… |
CVE-2020-7532 | High | 7.8 | 2020-09-16 | A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code ex… |