Export limit exceeded: 35583 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (35583 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-16991 1 Microsoft 1 Azure Sphere 2024-11-21 7.3 High
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16989 1 Microsoft 1 Azure Sphere 2024-11-21 5.4 Medium
Azure Sphere Elevation of Privilege Vulnerability
CVE-2020-16988 1 Microsoft 1 Azure Sphere 2024-11-21 6.9 Medium
Azure Sphere Elevation of Privilege Vulnerability
CVE-2020-16987 1 Microsoft 1 Azure Sphere 2024-11-21 7.3 High
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16986 1 Microsoft 1 Azure Sphere 2024-11-21 6.2 Medium
Azure Sphere Denial of Service Vulnerability
CVE-2020-16984 1 Microsoft 1 Azure Sphere 2024-11-21 7.3 High
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16983 1 Microsoft 1 Azure Sphere 2024-11-21 5.7 Medium
Azure Sphere Tampering Vulnerability
CVE-2020-16982 1 Microsoft 1 Azure Sphere 2024-11-21 6.1 Medium
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16981 1 Microsoft 1 Azure Sphere 2024-11-21 6.1 Medium
Azure Sphere Elevation of Privilege Vulnerability
CVE-2020-16979 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2024-11-21 5.3 Medium
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-16844 2 Istio, Redhat 2 Istio, Service Mesh 2024-11-21 6.8 Medium
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access, bypassing the intended policy.
CVE-2020-16843 1 Amazon 1 Firecracker 2024-11-21 5.9 Medium
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
CVE-2020-16269 2 Fedoraproject, Radare 2 Fedora, Radare2 2024-11-21 5.5 Medium
radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.
CVE-2020-16259 1 Winstonprivacy 2 Winston, Winston Firmware 2024-11-21 9.8 Critical
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.
CVE-2020-16155 1 Cpan\ 1 \ 2024-11-21 6.5 Medium
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
CVE-2020-16139 1 Cisco 2 Unified Ip Conference Station 7937g, Unified Ip Conference Station 7937g Firmware 2024-11-21 7.5 High
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVE-2020-16138 1 Cisco 2 Unified Ip Conference Station 7937g, Unified Ip Conference Station 7937g Firmware 2024-11-21 7.5 High
A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVE-2020-16137 1 Cisco 2 Unified Ip Conference Station 7937g, Unified Ip Conference Station 7937g Firmware 2024-11-21 9.8 Critical
A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
CVE-2020-16134 1 Swisscom 10 Internet-box 2, Internet-box 2 Firmware, Internet-box 3 and 7 more 2024-11-21 8.0 High
An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the (user-configurable) credentials for the local Web interface or physical access to a device's plus or reset button, an attacker can create a user with elevated privileges on the Sysbus-API. This can then be used to modify local or remote SSH access, thus allowing a login session as the superuser.
CVE-2020-16126 1 Freedesktop 1 Accountsservice 2024-11-21 3.3 Low
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.