CVE Vulnerability Database
Search and browse 394,627 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
18,322 records from 2020Clear filters
- CVE-2020-25850High 7.5Dec 31, 2020The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.
- CVE-2020-25848Critical 9.8Dec 31, 2020HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
- CVE-2020-25846High 7.4Dec 31, 2020The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
- CVE-2020-25845High 7.4Dec 31, 2020Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
- CVE-2020-25844Critical 9.8Dec 31, 2020The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
- CVE-2020-25843Critical 9.8Dec 31, 2020NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
- CVE-2020-25842High 7.5Dec 31, 2020The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.
- CVE-2019-7726Critical 9.8Dec 31, 2020modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).
- CVE-2019-7725Critical 9.8Dec 31, 2020includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).
- CVE-2018-16795High 8.8Dec 31, 2020OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file.
- CVE-2018-14067Critical 9.8Dec 31, 2020Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces (including the external Internet) by default. NOTE: this may overlap CVE-2017-9980.
- CVE-2016-9026Critical 9.8Dec 31, 2020Exponent CMS before 2.6.0 has improper input validation in fileController.php.
- CVE-2016-9025Critical 9.8Dec 31, 2020Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php.
- CVE-2016-9023Critical 9.8Dec 31, 2020Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php.
- CVE-2016-9022Critical 9.8Dec 31, 2020Exponent CMS before 2.6.0 has improper input validation in usersController.php.
- CVE-2016-9021Critical 9.8Dec 31, 2020Exponent CMS before 2.6.0 has improper input validation in storeController.php.
- CVE-2020-19664High 8.8Dec 31, 2020DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi.
- CVE-2020-17363Critical 9.9Dec 31, 2020USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069.
- CVE-2020-13654High 7.5Dec 31, 2020XWiki Platform before 12.8 mishandles escaping in the property displayer.
- CVE-2020-12658Critical 9.8Dec 31, 2020gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.
- CVE-2020-11947Low 3.8Dec 31, 2020iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.
- CVE-2019-20808Medium 6.5Dec 31, 2020In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
- CVE-2020-26291Medium 6.5Dec 31, 2020URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) character followed by an at (`@`) character. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior. For example the URL `https://expected-example.com\@observed-example.com` will incorrectly return `observed-example.com` if using an affected version. Patched versions correctly return `expected-example.com`. Patched versions match the behavior of other parsers which implement the WHATWG URL specification, including web browsers and Node's built-in URL class. Version 1.19.4 is patched against all known payload variants. Version 1.19.3 has a partial patch but is still vulnerable to a payload variant.]
- CVE-2020-27534Medium 5.3Dec 30, 2020util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
- CVE-2020-26296High 8.7Dec 30, 2020Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execute arbitrary javascript on a victim's machine. This is fixed in version 5.17.3