Security Vulnerabilities Published In 2020(Gain Privilege)

2020 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-35849	863	+Priv	2020-12-30	2021-07-21	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnote_id parameter.
2	CVE-2020-35766	59	+Priv	2020-12-28	2020-12-30	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.
3	CVE-2020-35676	79	+Priv XSS	2020-12-24	2020-12-28	4.3	None	Remote	Medium	Not required	None	Partial	None
BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once the arbitrary Javascript is executed in the context of the admin, this will cause the attacker to gain administrative privileges, effectively leading into an application takeover. This affects app/membership_signup.php and app/admin/pageViewMembers.php.
4	CVE-2020-35274	79	+Priv XSS	2020-12-21	2020-12-21	3.5	None	Remote	Medium	???	None	Partial	None
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS.
5	CVE-2020-35273	352	+Priv CSRF	2020-12-21	2020-12-22	6.0	None	Remote	Medium	???	Partial	Partial	Partial
EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.
6	CVE-2020-29607	434	Exec Code +Priv Bypass	2020-12-16	2022-02-07	6.5	None	Remote	Low	???	Partial	Partial	Partial
A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.
7	CVE-2020-29436	611	+Priv	2020-12-17	2020-12-18	5.5	None	Remote	Low	???	Partial	Partial	None
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0.
8	CVE-2020-29040	787	DoS +Priv	2020-11-24	2022-04-26	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.
9	CVE-2020-28912		+Priv	2020-12-24	2020-12-30	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between the client and the server, and getting the ability to run SQL commands on behalf of the connected user. This occurs because of an incorrect security descriptor. This affects MariaDB Server before 10.1.48, 10.2.x before 10.2.35, 10.3.x before 10.3.26, 10.4.x before 10.4.16, and 10.5.x before 10.5.7. NOTE: this issue exists because certain details of the MariaDB CVE-2019-2503 fix did not comprehensively address attack variants against MariaDB. This situation is specific to MariaDB, and thus CVE-2020-28912 does NOT apply to other vendors that were originally affected by CVE-2019-2503.
10	CVE-2020-28209	428	+Priv	2020-11-19	2022-01-31	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agent service binary path, being able to gain the privilege of the user who started the service. By default, the Enterprise Server and Enterprise Central is always installed at a location requiring Administrator privileges so the vulnerability is only valid if the application has been installed on a non-secure location.
11	CVE-2020-28169	732	+Priv	2020-12-24	2022-04-05	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.
12	CVE-2020-28133	89	+Priv Sql Bypass	2020-11-17	2020-12-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.
13	CVE-2020-28036	862	+Priv	2020-11-02	2022-04-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.
14	CVE-2020-28035		+Priv	2020-11-02	2022-04-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.
15	CVE-2020-27992	428	+Priv	2020-11-02	2021-07-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users.
16	CVE-2020-27903	269	+Priv	2020-12-08	2021-07-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges.
17	CVE-2020-27674	787	+Priv	2020-10-22	2022-04-26	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
18	CVE-2020-27672	362	DoS +Priv	2020-10-22	2022-04-26	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.
19	CVE-2020-27671		DoS +Priv	2020-10-22	2022-04-26	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
20	CVE-2020-27670	345	DoS +Priv	2020-10-22	2022-10-07	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.
21	CVE-2020-27645	428	+Priv	2020-12-29	2021-01-04	6.5	None	Remote	Low	???	Partial	Partial	Partial
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges.
22	CVE-2020-27644	428	+Priv	2020-12-29	2021-01-03	6.5	None	Remote	Low	???	Partial	Partial	Partial
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%\Temp\.
23	CVE-2020-27187		Exec Code +Priv	2020-10-26	2022-04-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related commands, while KDE Partition Manager is running. the mount command can then be used to gain full root privileges.
24	CVE-2020-27134	200	+Priv +Info	2020-12-11	2021-10-19	9.0	None	Remote	Low	???	Complete	Complete	Complete
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
25	CVE-2020-27133	269	+Priv	2020-12-11	2020-12-11	9.0	None	Remote	Low	???	Complete	Complete	Complete
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
26	CVE-2020-27132	269	+Priv	2020-12-11	2020-12-11	9.0	None	Remote	Low	???	Complete	Complete	Complete
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
27	CVE-2020-27129	88	+Priv	2020-11-06	2020-11-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands and potentially gain elevated privileges. The vulnerability is due to improper validation of commands to the remote management CLI of the affected application. An attacker could exploit this vulnerability by sending malicious requests to the affected application. A successful exploit could allow the attacker to inject arbitrary commands and potentially gain elevated privileges.
28	CVE-2020-27127	269	+Priv	2020-12-11	2020-12-11	9.0	None	Remote	Low	???	Complete	Complete	Complete
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
29	CVE-2020-26947	427	+Priv	2020-10-10	2022-04-28	4.6	None	Local	Low	Not required	Partial	Partial	Partial
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.
30	CVE-2020-26894	269	+Priv	2020-10-08	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell()" function, it will attempt to search for "cmd.exe" in the folder of the current application and run the malicious "cmd.exe".
31	CVE-2020-26506	862	+Priv Bypass	2020-11-05	2021-07-21	4.0	None	Remote	Low	???	Partial	None	None
An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.
32	CVE-2020-26086	668	+Priv	2020-11-06	2020-11-19	4.0	None	Remote	Low	???	Partial	None	None
A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected device. An attacker could exploit this vulnerability by accessing information that should not be accessible to users with low privileges. A successful exploit could allow the attacker to gain access to sensitive information.
33	CVE-2020-25889	89	+Priv Sql Bypass	2020-12-08	2020-12-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.
34	CVE-2020-25826	269	+Priv	2020-09-23	2021-07-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe.
35	CVE-2020-25612	863	+Priv	2020-12-18	2021-07-21	4.0	None	Remote	Low	???	Partial	None	None
The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files due to insufficient access control. Successful exploit could potentially allow an attacker to gain access to sensitive information.
36	CVE-2020-25060	269	+Priv	2020-08-31	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020).
37	CVE-2020-24848	287	+Priv	2020-10-23	2022-04-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.
38	CVE-2020-24718	862	+Priv	2020-09-25	2022-01-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demonstrated by a root user in a container on an Intel system, who can gain privileges by modifying VMCS_HOST_RIP.
39	CVE-2020-24678		Exec Code +Priv	2020-12-22	2021-10-07	6.5	None	Remote	Low	???	Partial	Partial	Partial
An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges.
40	CVE-2020-24563	269	Exec Code +Priv	2020-09-29	2021-07-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit this vulnerability.
41	CVE-2020-24562	269	Exec Code +Priv	2020-09-29	2021-07-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This CVE is similar, but not identical to CVE-2020-24556.
42	CVE-2020-24556	59	Exec Code +Priv	2020-09-01	2022-04-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
43	CVE-2020-24034	502	+Priv	2020-09-01	2020-09-11	9.0	None	Remote	Low	???	Complete	Complete	Complete
Sagemcom [email protected] 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise.
44	CVE-2020-20183	862	+Priv	2020-12-14	2021-07-21	5.0	None	Remote	Low	Not required	Partial	None	None
Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.
45	CVE-2020-17506	89	+Priv Sql Bypass	2020-08-12	2022-11-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.
46	CVE-2020-16976	269	+Priv	2020-10-16	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975.
47	CVE-2020-16975	269	+Priv	2020-10-16	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16974, CVE-2020-16976.
48	CVE-2020-16974	269	+Priv	2020-10-16	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16973, CVE-2020-16975, CVE-2020-16976.
49	CVE-2020-16973	269	+Priv	2020-10-16	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16972, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
50	CVE-2020-16972	269	+Priv	2020-10-16	2021-07-21	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.

Total number of vulnerabilities : 310 Page : 1 (This Page)2 3 4 5 6 7