Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
77 results · Clear filters · Feed
-
Unscored —CVE-2020-25015 Public exploit
A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generall…
-
High 8.8CVE-2020-2261 Public exploit
OS command execution vulnerability in Perfecto Plugin
Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller
-
Medium 6.7CVE-2020-14386 Public exploit
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from un…
-
Unscored —CVE-2020-25453 Public exploit
An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remot…
-
Unscored —CVE-2020-10759 Public exploit
A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmwar…
-
High 8.9
Unsafe deserialization in Yii 2
Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls `unserialize()` on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory.
-
Medium 5.3CVE-2020-8927 Public exploit
Buffer overflow in Brotli library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…
-
Unscored —CVE-2020-11881 Public exploit
An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated r…
-
Critical 9.8
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
-
High 7.5
ThinkAdmin directory traversal vulnerability
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.
-
Unscored —CVE-2020-25279 Public exploit
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The base…
-
Medium 6.8CVE-2020-1034 Public exploit
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the vulnerability, a local…
-
High 8.4
Microsoft Exchange Server Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitati…
-
Medium 6.5CVE-2020-0890 Public exploit
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the vulnerability, an attacker who already has a privileged accou…
-
Medium 5.4CVE-2020-15169 Public exploit
XSS in Action View
In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could …
-
Unscored —CVE-2020-15802 Public exploit
Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivat…
-
Critical 9.8
Remote code execution in Apache ActiveMQ
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.or…
-
High 7.2
PAN-OS: OS command injection vulnerability in the management web interface
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier t…
-
Unscored —CVE-2020-14292 Public exploit
In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT conne…
-
Critical 10.0
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitr…
KEV Nov 3, 2021 -
Unscored —CVE-2020-24963 Public exploit
An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
-
Unscored —
Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar i…
-
Unscored —CVE-2020-11493 Public exploit
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information a…
-
Unscored —
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation…
-
Unscored —CVE-2020-25068 Public exploit
Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote una…
-
Unscored —
An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenti…
-
Unscored —
Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a c…
-
High 8.8
Dolibarr Unrestricted Upload of File with Dangerous Type
Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to…
-
Unscored —CVE-2020-24028 Public exploit
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, passwo…
-
Unscored —CVE-2020-24029 Public exploit
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can …
-
Unscored —CVE-2020-24030 Public exploit
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and acces…
-
High 7.5
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticat…
KEV Aug 5, 2025 -
Unscored —CVE-2020-16602 Public exploit
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a r…
-
Unscored —CVE-2020-24955 Public exploit
SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileg…
-
Medium 6.4CVE-2020-23835 Public exploit
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Man…
-
Unscored —
A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webp…
-
High 7.5
Rapid7 Metasploit HTTP Handler Denial of Service
By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established…