CVE-2020-15899

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-345

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 28, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-15906.6<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operatioCVE-2020-159009.8A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of CVE-2020-159018.8In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.CVE-2020-159026.1Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.CVE-2020-159039.8An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some iCVE-2020-159047.8A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via aCVE-2020-159069.8tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.CVE-2020-159076.1In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containingCVE-2020-159087.5tar/TarFileReader.cpp in Cauldron cbang (aka C-Bang or C!) before 1.6.0 allows Directory Traversal during extraction from a TAR archive.CVE-2020-159098.8SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookCVE-2020-15915.4A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web reqCVE-2020-159104.7SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the co
CVE-2020-15899: High severity, CVSS 7.5 | Vulnix