Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 112 of 215.
- CVE-2020-2599 Other in Hospitality Cruise Materials Management
- CVE-2020-25989 Privilege escalation in pritunl:pritunl-client-electron
- CVE-2020-25988 Information disclosure in genexis:platinum 4410 firmware
- CVE-2020-25987 Hardcoded credentials in monocms:monocms
- CVE-2020-25986 Cross-site request forgery in monocms:monocms
- CVE-2020-25985 Path traversal in monocms:monocms
- CVE-2020-2598 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2597 Other in One-to-One Fulfillment
- CVE-2020-25969 Memory corruption in gnuplot:gnuplot
- CVE-2020-25967 Code injection in fastadmin:fastadmin
- CVE-2020-25966 Missing authorization in sectona:spectra
- CVE-2020-2596 Other in CRM Technical Foundation
- CVE-2020-25955 Cross-site scripting in student management system project in php project:student management system project in php
- CVE-2020-25952 SQL injection in phpgurukul:user registration \& login and user management system
- CVE-2020-25950 Cross-site request forgery in totalonlinesolutions:advanced webhost billing system
- CVE-2020-2595 Information disclosure in GraalVM Enterprise Edition
- CVE-2020-2594 Other in Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-2593 Other in Java
- CVE-2020-25928 Memory corruption in hcc-embedded:nichestack tcp\/ip
- CVE-2020-25927 Memory corruption in hcc-embedded:nichestack tcp\/ip
- CVE-2020-25926 Weak cryptography in hcc-embedded:nichestack tcp\/ip
- CVE-2020-25925 Cross-site scripting in icewarp:webclient
- CVE-2020-2592 Information disclosure in AutoVue 3D Professional Advanced
- CVE-2020-25917 Missing authorization in stratodesk:notouch center
- CVE-2020-25915 ThinkCMF Cross-site Scripting Vulnerability
- CVE-2020-25912 XML external entity in getsymphony:symphony
- CVE-2020-25911 XML External Entity vulnerability in MODX CMS
- CVE-2020-2591 Other in Web Applications Desktop Integrator
- CVE-2020-25905 SQL injection in mobile shop system project:mobile shop system
- CVE-2020-25902 Cross-site scripting in blackboard:collaborate ultra
- CVE-2020-25901 Open redirect in spiceworks:spiceworks
- CVE-2020-25900 Information disclosure in HelloTalk
- CVE-2020-2590 Other in Java
- CVE-2020-25890 Cross-site scripting in kyocera:ecosys m2640idw firmware
- CVE-2020-2589 Denial of service in MySQL Server
- CVE-2020-25889 SQL injection in online bus booking system project:online bus booking system
- CVE-2020-25887 Memory corruption in cesanta:mongoose
- CVE-2020-25881 Path traversal in ranko:rkcms
- CVE-2020-2588 Denial of service in MySQL Server
- CVE-2020-25879 Cross-site scripting in codologic:codoforum
- CVE-2020-25878 Cross-site scripting in blackcat-cms:blackcat cms
- CVE-2020-25877 Cross-site scripting in blackcat-cms:blackcat cms
- CVE-2020-25876 Cross-site scripting in codologic:codoforum
- CVE-2020-25875 Cross-site scripting in codologic:codoforum
- CVE-2020-25873 Path traversal in baijiacms project:baijiacms
- CVE-2020-25872 Path traversal in frogcms project:frogcms
- CVE-2020-2587 Other in Human Resources
- CVE-2020-25869 Information disclosure in fedoraproject:fedora
- CVE-2020-25868 Denial of service in pexip:pexip infinity
- CVE-2020-25867 Auth bypass in soplanning:soplanning
- CVE-2020-25866 Null dereference in fedoraproject:fedora
- CVE-2020-25864 HashiCorp Consul Cross-site Scripting vulnerability
- CVE-2020-25863 Memory corruption in debian:debian linux
- CVE-2020-25862 Denial of service in debian:debian linux
- CVE-2020-25860 Race condition in Pengutronix RAUC
- CVE-2020-2586 Other in Human Resources
- CVE-2020-25859 Command injection in Qualcomm QCMAP
- CVE-2020-25858 Null dereference in Qualcomm QCMAP
- CVE-2020-25857 Memory corruption in Realtek RTL8195A Wi-Fi Module
- CVE-2020-25856 Memory corruption in Realtek RTL8195A Wi-Fi Module
- CVE-2020-25855 Memory corruption in Realtek RTL8195A Wi-Fi Module
- CVE-2020-25854 Memory corruption in Realtek RTL8195A Wi-Fi Module
- CVE-2020-25853 Memory corruption in Realtek RTL8195A Wi-Fi Module
- CVE-2020-25850 HGiga MailSherlock - Arbitrary File Download
- CVE-2020-2585 Other in Java
- CVE-2020-25849 Openfind MailGates/MailAudit - Command Injection
- CVE-2020-25848 HGiga MailSherlock - Broken Authentication
- CVE-2020-25847 Command Injection Vulnerability in QTS and QuTS hero
- CVE-2020-25846 CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2
- CVE-2020-25845 CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1
- CVE-2020-25844 CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow
- CVE-2020-25843 CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow
- CVE-2020-25842 CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access
- CVE-2020-25840 Cross-site scripting in Access Manager.
- CVE-2020-2584 Other in MySQL Server
- CVE-2020-25839 SQL injection in NetIQ Identity Manager
- CVE-2020-25838 Information disclosure in Filr
- CVE-2020-25837 Information disclosure in Micro Focus Self Service Password Reset (SSPR)
- CVE-2020-25836 Potential information leakage resulting in unauthorized access
- CVE-2020-25835 Micro Focus ArcSight Management Center Remote Vulnerability
- CVE-2020-25834 Cross-site scripting in ArcSight Logger
- CVE-2020-25833 Cross-site scripting in IDOL
- CVE-2020-25832 Cross-site scripting in Filr
- CVE-2020-25830 MantisBT HTML Injection vulnerability
- CVE-2020-2583 Denial of service in Java
- CVE-2020-25829 Denial of service in opensuse:backports sle
- CVE-2020-25828 MediaWiki Cross-site Scripting (XSS) vulnerability
- CVE-2020-25827 OATHAuth extension in MediaWiki is not implementing rate limit
- CVE-2020-25826 Privilege escalation in pingidentity:pingid integration for windows login
- CVE-2020-25825 Information disclosure in octopus:octopus deploy
- CVE-2020-25824 Auth bypass in telegram:telegram desktop
- CVE-2020-25821 Null dereference in peg-markdown project:peg-markdown
- CVE-2020-25820 Server-side request forgery in bigbluebutton:bigbluebutton
- CVE-2020-2582 Other in iStore
- CVE-2020-25817 SilverStripe XXE Vulnerability in CSSContentParser
- CVE-2020-25816 Token leases could outlive their TTL in HashiCorp Vault
- CVE-2020-25815 MediaWiki Cross-site Scripting (XSS) vulnerability
- CVE-2020-25814 MediaWiki Cross-site Scripting (XSS) vulnerability
- CVE-2020-25813 MediaWiki Special:UserRights exposes the existence of hidden users
- CVE-2020-25812 MediaWiki Cross-site Scripting (XSS) vulnerability