Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 111 of 215.
- CVE-2020-26139 Auth bypass in arista:c-100 firmware
- CVE-2020-26138 FormField with square brackets in field name skips validation
- CVE-2020-26137 CRLF injection in urllib3
- CVE-2020-26136 Authentication bypass in SilverStripe GraphQL
- CVE-2020-26135 Cross-site scripting in livehelperchat:live helper chat
- CVE-2020-26134 Cross-site scripting in livehelperchat:live helper chat
- CVE-2020-26133 Privilege escalation in dual dhcp dns server project:dual dhcp dns server
- CVE-2020-26132 Misconfiguration in home dns server project:home dns server
- CVE-2020-26131 Misconfiguration in open dhcp server project:open dhcp server
- CVE-2020-26130 Misconfiguration in open tftp server project:open tftp server
- CVE-2020-2613 Other in Enterprise Manager Base Platform
- CVE-2020-26129 Other in jetbrains:ktor
- CVE-2020-26124 Code injection in openmediavault:openmediavault
- CVE-2020-26122 Security feature bypass in inspur:nf5180m5 firmware
- CVE-2020-26121 Missing authorization in fedoraproject:fedora
- CVE-2020-26120 Cross-site scripting in fedoraproject:fedora
- CVE-2020-2612 Other in Enterprise Manager Base Platform
- CVE-2020-26118 Deserialization in smartbear:collaborator
- CVE-2020-26117 Security feature bypass in debian:debian linux
- CVE-2020-26116 Other in canonical:ubuntu linux
- CVE-2020-26115 Cross-site scripting in cpanel:cpanel
- CVE-2020-26114 Cross-site scripting in cpanel:cpanel
- CVE-2020-26113 Cross-site scripting in cpanel:cpanel
- CVE-2020-26112 Other in cpanel:cpanel
- CVE-2020-26111 Cross-site scripting in cpanel:cpanel
- CVE-2020-26110 Cross-site scripting in cpanel:cpanel
- CVE-2020-2611 Other in Enterprise Manager Base Platform
- CVE-2020-26109 Security feature bypass in cpanel:cpanel
- CVE-2020-26108 Code injection in cpanel:cpanel
- CVE-2020-26107 Weak cryptography in cpanel:cpanel
- CVE-2020-26106 Misconfiguration in cpanel:cpanel
- CVE-2020-26105 Hardcoded credentials in cpanel:cpanel
- CVE-2020-26104 Weak cryptography in cpanel:cpanel
- CVE-2020-26103 Hardcoded credentials in cpanel:cpanel
- CVE-2020-26102 Hardcoded credentials in cpanel:cpanel
- CVE-2020-26101 Hardcoded credentials in cpanel:cpanel
- CVE-2020-26100 Security feature bypass in cpanel:cpanel
- CVE-2020-2610 Other in Enterprise Manager Base Platform
- CVE-2020-26099 Security feature bypass in cpanel:cpanel
- CVE-2020-26098 Code injection in cpanel:cpanel
- CVE-2020-26097 Hardcoded credentials in planet:nvr-1615 firmware
- CVE-2020-2609 Other in Enterprise Manager Base Platform
- CVE-2020-26088 Security feature bypass in canonical:ubuntu linux
- CVE-2020-26086 Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability
- CVE-2020-26085 Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
- CVE-2020-26084 Cisco Edge Fog Fabric Resource Exposure Vulnerability
- CVE-2020-26083 Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- CVE-2020-26082 Security feature bypass in Cisco Secure Email
- CVE-2020-26081 Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities
- CVE-2020-26080 Cisco IoT Field Network Director Improper Domain Access Control Vulnerability
- CVE-2020-2608 Other in Enterprise Manager Base Platform
- CVE-2020-26079 Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability
- CVE-2020-26078 Cisco IoT Field Network Director File Overwrite Vulnerability
- CVE-2020-26077 Cisco IoT Field Network Director Improper Access Control Vulnerability
- CVE-2020-26076 Cisco IoT Field Network Director Information Disclosure Vulnerability
- CVE-2020-26075 Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability
- CVE-2020-26074 Cisco SD-WAN vManage Privilege Escalation Vulnerability
- CVE-2020-26073 Cisco SD-WAN vManage Directory Traversal Vulnerability
- CVE-2020-26072 Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability
- CVE-2020-26071 Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
- CVE-2020-26070 Denial of service in Cisco IOS XR Software
- CVE-2020-2607 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-26068 Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability
- CVE-2020-26067 Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability
- CVE-2020-26066 Cisco SD-WAN vManage Software XML External Entity Vulnerability
- CVE-2020-26065 Path traversal in Cisco SD-WAN vManage
- CVE-2020-26064 XML external entity in Cisco SD-WAN vManage
- CVE-2020-26063 Cisco Integrated Management Controller Software Authorization Bypass Vulnerability
- CVE-2020-26062 Cisco Integrated Management Controller Username Enumeration Vulnerability
- CVE-2020-26061 Auth bypass in clickstudios:passwordstate
- CVE-2020-2606 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-26052 Cross-site scripting in phpgurukul:online marriage registration system
- CVE-2020-26051 SQL injection in college management system project:college management system
- CVE-2020-26050 Privilege escalation in safervpn:safervpn
- CVE-2020-2605 Other in Solaris Operating System
- CVE-2020-26049 Cross-site scripting in niftypm:nifty-pm
- CVE-2020-26048 File upload in cuppacms:cuppacms
- CVE-2020-26046 Cross-site scripting in thedaylightstudio:fuel cms
- CVE-2020-26045 SQL injection in thedaylightstudio:fuel cms
- CVE-2020-26043 Cross-site scripting in hoosk:hoosk
- CVE-2020-26042 SQL injection in hoosk:hoosk
- CVE-2020-26041 Code injection in hoosk:hoosk
- CVE-2020-2604 Deserialization in Java
- CVE-2020-26037 Path traversal in evenbalance:punkbuster
- CVE-2020-26035 Cross-site scripting in zammad:zammad
- CVE-2020-26034 Information disclosure in zammad:zammad
- CVE-2020-26033 Cross-site request forgery in zammad:zammad
- CVE-2020-26032 Server-side request forgery in zammad:zammad
- CVE-2020-26031 Missing authorization in zammad:zammad
- CVE-2020-26030 Auth bypass in zammad:zammad
- CVE-2020-2603 Other in Field Service
- CVE-2020-26029 Missing authorization in zammad:zammad
- CVE-2020-26028 Missing authorization in zammad:zammad
- CVE-2020-2602 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2601 Information disclosure in Java
- CVE-2020-26008 File upload in shopxo:shopxo
- CVE-2020-26007 File upload in shopxo:shopxo
- CVE-2020-26006 Cross-site scripting in online examination system project:online examination system
- CVE-2020-2600 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-25990 SQL injection in websitebaker:websitebaker