Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 107 of 215.
- CVE-2020-26868 ARC Informatique PcVue Access to Critical Private Variable via Public Method
- CVE-2020-26867 ARC Informatique PcVue Deserialization of Untrusted Data
- CVE-2020-2686 Denial of service in MySQL Server
- CVE-2020-2685 Other in FLEXCUBE Universal Banking
- CVE-2020-2684 Other in FLEXCUBE Universal Banking
- CVE-2020-26838 Code injection in SAP BW4HANA
- CVE-2020-26837 Path traversal in SAP Solution Manager (User Experience Monitoring)
- CVE-2020-26836 Open redirect in SAP Solution Manager (Trace Analysis)
- CVE-2020-26835 Cross-site scripting in SAP NetWeaver AS ABAP
- CVE-2020-26834 Auth bypass in SAP HANA Database
- CVE-2020-26832 Missing authorization in SAP NetWeaver AS ABAP (SAP Landscape Transformation)
- CVE-2020-26831 XML external entity in SAP BusinessObjects BI Platform (Crystal Report)
- CVE-2020-26830 Missing authorization in SAP Solution Manager (User Experience Monitoring)
- CVE-2020-2683 Other in FLEXCUBE Universal Banking
- CVE-2020-26829 Missing authorization in SAP NetWeaver AS JAVA (P2P Cluster Communication)
- CVE-2020-26828 Code injection in SAP Disclosure Management.
- CVE-2020-26826 File upload in SAP NetWeaver AS JAVA
- CVE-2020-26825 Cross-site scripting in SAP Fiori Launchpad (News Tile Application)
- CVE-2020-26824 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26823 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26822 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26821 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26820 File upload in SAP NetWeaver AS JAVA
- CVE-2020-2682 Other in VM VirtualBox
- CVE-2020-26819 Missing authorization in SAP NetWeaver AS ABAP (Web Dynpro)
- CVE-2020-26818 Missing authorization in SAP NetWeaver AS ABAP (Web Dynpro)
- CVE-2020-26817 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2020-26816 Weak cryptography in SAP NetWeaver AS JAVA (Key Storage Service)
- CVE-2020-26815 Server-side request forgery in SAP Fiori Launchpad (News Tile Application)
- CVE-2020-26814 Information disclosure in SAP Process Integration (PGP - Module Business-to-Business Add On)
- CVE-2020-26811 Server-side request forgery in SAP Commerce Cloud (Accelerator Payment Mock)
- CVE-2020-26810 Denial of service in SAP Commerce Cloud (Accelerator Payment Mock)
- CVE-2020-2681 Information disclosure in VM VirtualBox
- CVE-2020-26809 Auth bypass in SAP Commerce Cloud
- CVE-2020-26808 Code injection in SAP AS ABAP(DMIS)
- CVE-2020-26807 Misconfiguration in SAP ERP Client for E-Bilanz 1.0
- CVE-2020-26806 File upload in objectplanet:opinio
- CVE-2020-26805 SQL injection in sapplica:sentrifugo
- CVE-2020-26804 File upload in sapplica:sentrifugo
- CVE-2020-26803 File upload in sapplica:sentrifugo
- CVE-2020-26802 Cross-site request forgery in formalms:formalms
- CVE-2020-26801 Cross-site scripting in tripplite:su2200rtxl2ua firmware
- CVE-2020-26800 Memory corruption in ethereum:aleth
- CVE-2020-2680 Denial of service in Solaris Operating System
- CVE-2020-26799 A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to
- CVE-2020-26797 Memory corruption in fedoraproject:fedora
- CVE-2020-2679 Denial of service in MySQL Server
- CVE-2020-2678 Other in VM VirtualBox
- CVE-2020-26773 SQL injection in restaurant reservation system project:restaurant reservation system
- CVE-2020-26772 Command injection in ppgo jobs project:ppgo jobs
- CVE-2020-2677 Other in Hospitality OPERA 5 Property Services
- CVE-2020-26768 Formstone Vulnerable to Reflected XSS
- CVE-2020-26766 Cross-site request forgery in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel
- CVE-2020-26763 Other in rocket.chat:rocket.chat
- CVE-2020-26762 Memory corruption in edimax:ic-3116w firmware
- CVE-2020-2676 Cross-site scripting in Hospitality OPERA 5 Property Services
- CVE-2020-26759 Arbitrary code execution in clickhouse-driver
- CVE-2020-2675 Other in Hospitality OPERA 5 Property Services
- CVE-2020-2674 Other in VM VirtualBox
- CVE-2020-26733 Cross-site scripting in skyworth:gn542vf firmware
- CVE-2020-26732 Information disclosure in skyworth:gn542vf boa firmware
- CVE-2020-2673 Other in Application Testing Suite
- CVE-2020-26728 Command injection in tenda:ac9 firmware
- CVE-2020-2672 Other in Email Center
- CVE-2020-26713 Cross-site scripting in vanderbilt:redcap
- CVE-2020-26712 SQL injection in vanderbilt:redcap
- CVE-2020-26710 easy-parse XML External Entity Injection vulnerability
- CVE-2020-2671 Other in Email Center
- CVE-2020-26709 py-xml XML External Entity Injection vulnerability
- CVE-2020-26708 requests-xml XML External Entity Injection vulnerability
- CVE-2020-26707 Command injection in aaptjs project:aaptjs
- CVE-2020-26705 XML External Entity vulnerability in Easy-XML
- CVE-2020-26701 Cross-site scripting in kaaproject:kaa
- CVE-2020-2670 Other in Email Center
- CVE-2020-26693 Cross-site scripting in pfsense:pfsense
- CVE-2020-2669 Other in Email Center
- CVE-2020-26683 Information disclosure in artifex:mupdf
- CVE-2020-26682 Integer overflow in libass project:libass
- CVE-2020-26680 Cross-site scripting in vfairs:vfairs
- CVE-2020-2668 Other in iSupport
- CVE-2020-26679 Missing authorization in vfairs:vfairs
- CVE-2020-26678 File upload in vfairs:vfairs
- CVE-2020-26677 SQL injection in vfairs:vfairs
- CVE-2020-26672 Cross-site scripting in testimonial rotator project:testimonial rotator
- CVE-2020-26670 Command injection in bigtreecms:bigtree cms
- CVE-2020-2667 Other in iSupport
- CVE-2020-26669 Cross-site scripting in bigtreecms:bigtree cms
- CVE-2020-26668 SQL injection in bigtreecms:bigtree cms
- CVE-2020-26664 Memory corruption in debian:debian linux
- CVE-2020-2666 Other in Applications Framework
- CVE-2020-26652 Denial of service in realtek:rtl8812au firmware
- CVE-2020-26650 Path traversal in atomx:atomxcms
- CVE-2020-2665 Other in iSupport
- CVE-2020-26649 Missing authorization in atomx:atomxcms 2
- CVE-2020-26642 Cross-site scripting in seacms:seacms
- CVE-2020-26641 Cross-site request forgery in idreamsoft:icms
- CVE-2020-2664 Other in Solaris Operating System
- CVE-2020-26630 SQL injection in phpgurukul:hospital management system
- CVE-2020-2663 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-26629 File upload in phpgurukul:hospital management system