Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 109 of 215.
- CVE-2020-2642 Other in Enterprise Manager Base Platform
- CVE-2020-26419 Denial of service in Wireshark
- CVE-2020-26418 Denial of service in Wireshark
- CVE-2020-26417 Information disclosure in GitLab CE/EE
- CVE-2020-26416 Information disclosure in GitLab EE
- CVE-2020-26415 Missing authorization in GitLab
- CVE-2020-26414 Denial of service in GitLab
- CVE-2020-26413 Information disclosure in GitLab CE/EE
- CVE-2020-26412 Missing authorization in GitLab EE
- CVE-2020-26411 Denial of service in GitLab
- CVE-2020-2641 Other in Enterprise Manager Base Platform
- CVE-2020-26409 Denial of service in GitLab CE/EE
- CVE-2020-26408 Missing authorization in GitLab CE/EE
- CVE-2020-26407 Cross-site scripting in Gitlab CE/EE
- CVE-2020-26406 Information disclosure in GitLab EE
- CVE-2020-26405 Path traversal in GitLab CE/EE
- CVE-2020-2640 Other in Enterprise Manager Base Platform
- CVE-2020-2639 Other in Enterprise Manager Base Platform
- CVE-2020-2638 Other in Enterprise Manager Base Platform
- CVE-2020-2637 Other in Enterprise Manager for Oracle Database
- CVE-2020-2636 Other in Enterprise Manager Base Platform
- CVE-2020-2635 Other in Enterprise Manager Base Platform
- CVE-2020-2634 Other in Enterprise Manager Base Platform
- CVE-2020-2633 Other in Enterprise Manager Base Platform
- CVE-2020-2632 Other in Enterprise Manager Base Platform
- CVE-2020-26312 GHSL-2020-254: Arbitrary file read and/or write in dotmesh
- CVE-2020-26311 GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent
- CVE-2020-26310 GHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser
- CVE-2020-2631 Other in Enterprise Manager Base Platform
- CVE-2020-26309 GHSL-2020-303: Regular Expression Denial of Service (ReDoS) in nope-validator
- CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js
- CVE-2020-26307 GHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown
- CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js
- CVE-2020-26305 GHSL-2020-291: Regular Expression Denial of Service (ReDoS) in CommonRegexJS
- CVE-2020-26304 GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites
- CVE-2020-26303 GHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane
- CVE-2020-26302 is_js vulnerable to Regular Expression Denial of Service
- CVE-2020-26301 Command injection in mscdex/ssh2
- CVE-2020-26300 Command injection in systeminformation
- CVE-2020-2630 Other in Enterprise Manager Base Platform
- CVE-2020-26299 File System Bounds Escape
- CVE-2020-26298 Injection in Redcarpet
- CVE-2020-26297 XSS in mdBook's search page
- CVE-2020-26296 XSS in Vega
- CVE-2020-26295 CMS Editor code execution
- CVE-2020-26294 Exposure of server configuration
- CVE-2020-26293 Possible XSS bypass if style tag is allowed
- CVE-2020-26292 Potential Malware Discovered (Possible False Positive)
- CVE-2020-26291 Hostname spoofing in URI.js
- CVE-2020-26290 Critical security issues in XML encoding in Dex
- CVE-2020-2629 Other in Enterprise Manager Base Platform
- CVE-2020-26289 Regular expression Denial of Service in date-and-time
- CVE-2020-26288 Parse Server stores password in plain text
- CVE-2020-26287 Stored XSS in mermaid diagrams
- CVE-2020-26286 Arbitary file upload
- CVE-2020-26285 Widget instances allows a hacker to inject an executable file on the server on OpenMage
- CVE-2020-26284 Hugo can execute a binary from the current directory on Windows
- CVE-2020-26283 Control character injection in console output
- CVE-2020-26282 Template Injection in BrowserUp Proxy
- CVE-2020-26281 request smuggling in async-h1
- CVE-2020-26280 XSS in OpenSlides
- CVE-2020-2628 Other in Enterprise Manager Base Platform
- CVE-2020-26279 Path traversal
- CVE-2020-26278 Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities
- CVE-2020-26277 Arbitrary read/write in DBdeployer
- CVE-2020-26276 SAML authentication vulnerability in Fleet
- CVE-2020-26275 Open redirect vulnerability
- CVE-2020-26274 Command Injection Vulnerability in systeminformation
- CVE-2020-26273 sqlite ATTACH allows some filesystem access
- CVE-2020-26272 Electron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs
- CVE-2020-26271 Heap out of bounds access in MakeEdge in TensorFlow
- CVE-2020-26270 CHECK-fail in LSTM with zero-length input in TensorFlow
- CVE-2020-2627 Denial of service in MySQL Server
- CVE-2020-26269 Heap out of bounds read in filesystem glob matching in TensorFlow
- CVE-2020-26268 Write to immutable memory region in TensorFlow
- CVE-2020-26267 Lack of validation in data format attributes in TensorFlow
- CVE-2020-26266 Uninitialized memory access in Eigen types in TensorFlow
- CVE-2020-26265 Consensus flaw during block processing
- CVE-2020-26264 LES Server DoS via GetProofsV2
- CVE-2020-26263 RSA vulnerability in tslite-ng
- CVE-2020-26262 Loopback bypass in Coturn
- CVE-2020-26261 user-readable api tokens in systemd units
- CVE-2020-26260 Server Side Request Forgery in BookStack
- CVE-2020-2626 Other in Enterprise Manager Base Platform
- CVE-2020-26259 XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
- CVE-2020-26258 Server-Side Forgery Request can be activated unmarshalling with XStream
- CVE-2020-26257 Denial of service attack via incorrect parameters to federation APIs
- CVE-2020-26256 Denial of service in fast-csv
- CVE-2020-26255 PHP Phar archives could be uploaded and executed in Kirby
- CVE-2020-26254 omniauth-apple allows attacker to fake their email address during authentication
- CVE-2020-26253 .dev domains treated as local in Kirby
- CVE-2020-26252 Layout XML RCE Vulnerability in OpenMage
- CVE-2020-26251 CORS configuration is possibly vulnerable
- CVE-2020-26250 Base class whitelist configuration ignored in OAuthenticator
- CVE-2020-2625 Other in Enterprise Manager Base Platform
- CVE-2020-26249 Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
- CVE-2020-26248 Blind SQL injection during the CommentGrade process
- CVE-2020-26247 XXE in Nokogiri
- CVE-2020-26246 Authorization bypass in Pimcore
- CVE-2020-26245 Prototype Pollution leading to Command Injection in systeminformation