CVE-2020-15018

MediumCVSS 6.5/10Last modified Jun 17, 2026

Related CVEs from 2020

CVE-2020-15025.5An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploiteCVE-2020-150205.4An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name CVE-2020-150235.9Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues CVE-2020-150245.5An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered passworCVE-2020-150254.9ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sendCVE-2020-150264.9Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plCVE-2020-150279.8ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a seriesCVE-2020-150285.4NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via CVE-2020-150295.4NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via thCVE-2020-15035.5An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploiteCVE-2020-150305.4NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via thCVE-2020-150315.4NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via th
CVE-2020-15018: Medium severity, CVSS 6.5 | Vulnix