Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 119 of 215.
- CVE-2020-25011 Information disclosure in kyland:kps2204 6 port managed din-rail programmable serial device firmware
- CVE-2020-25010 File upload in kyland:kps2204 6 port managed din-rail programmable serial device firmware
- CVE-2020-2501 Stack Buffer Overflow in Surveillance Station
- CVE-2020-25006 SQL injection in heybbs project:heybbs
- CVE-2020-25005 SQL injection in heybbs project:heybbs
- CVE-2020-25004 SQL injection in heybbs project:heybbs
- CVE-2020-2500 Hardcoded credentials in Helpdesk
- CVE-2020-24999 Memory corruption in xpdfreader:xpdf
- CVE-2020-24996 Memory corruption in xpdfreader:xpdf
- CVE-2020-24995 Memory corruption in ffmpeg:ffmpeg
- CVE-2020-24994 Memory corruption in libass project:libass
- CVE-2020-24993 Cross-site scripting in cmswing:cmswing
- CVE-2020-24992 Cross-site scripting in cmswing:cmswing
- CVE-2020-24990 Path traversal in qsc:q-sys core manager
- CVE-2020-2499 Hard-coded Password Vulnerability in QES
- CVE-2020-24987 Auth bypass in tendacn:ac18 firmware
- CVE-2020-24986 File upload in concretecms:concrete cms
- CVE-2020-24985 Code injection in quadbase:espressdashboard
- CVE-2020-24984 Cross-site request forgery in quadbase:espressreports es
- CVE-2020-24983 Cross-site request forgery in quadbase:espressreports es
- CVE-2020-24982 Cross-site request forgery in quadbase:espressdashboard
- CVE-2020-24981 Information disclosure in ucms project:ucms
- CVE-2020-2498 Cross-site scripting vulnerability in QTS and QuTS hero
- CVE-2020-24978 Memory corruption in nasm:netwide assembler
- CVE-2020-24977 Memory corruption in debian:debian linux
- CVE-2020-24972 Command injection in fedoraproject:fedora
- CVE-2020-2497 Cross-site scripting vulnerability in QTS and QuTS hero
- CVE-2020-24963 Cross-site scripting in appsbd:best support system
- CVE-2020-2496 Cross-site scripting vulnerability in QTS and QuTS hero
- CVE-2020-24955 Privilege escalation in superantispyware:professional x
- CVE-2020-24950 SQL injection in thedaylightstudio:fuel cms
- CVE-2020-2495 Cross-site scripting vulnerability in QTS and QuTS hero
- CVE-2020-24949 Command injection in php-fusion:php-fusion
- CVE-2020-24948 File upload in autoptimize:autoptimize
- CVE-2020-24944 Denial of service in privateoctopus:picoquic
- CVE-2020-24941 Improper Input Validation in Laravel
- CVE-2020-24940 Guard bypass in Eloquent models affecting Laravel illuminate database component
- CVE-2020-2494 Cross-site Scripting Vulnerability in Music Station
- CVE-2020-24939 Prototype pollution in supermixer
- CVE-2020-24932 SQL injection in razormist:complaint management system
- CVE-2020-24930 Path traversal in wuzhicms:wuzhicms
- CVE-2020-2493 Cross-site Scripting Vulnerability in Multimedia Console
- CVE-2020-24928 Missing authorization in premid:premid
- CVE-2020-24925 Information disclosure in elkarbackup:elkarbackup
- CVE-2020-24924 Cross-site scripting in elkarbackup:elkarbackup
- CVE-2020-24922 xuxueli xxl-job Cross-Site Request Forgery Vulnerability
- CVE-2020-2492 Command injection in QTS
- CVE-2020-24918 Memory corruption in ambarella:oryx rtsp server
- CVE-2020-24917 Cross-site scripting in enhancesoft:osticket
- CVE-2020-24916 Command injection in canonical:ubuntu linux
- CVE-2020-24914 qcubed PHP object injection
- CVE-2020-24913 qcubed SQL injection vulnerability in profile.php via the strQuery parameter
- CVE-2020-24912 qcubed reflected cross-site scripting (XSS) vulnerability
- CVE-2020-2491 Cross-site Scripting Vulnerability in Photo Station
- CVE-2020-24908 Privilege escalation in checkmk:checkmk
- CVE-2020-24904 Information disclosure in davesteele:gnome-gmail
- CVE-2020-24903 Cross-site scripting in cutesoft:cute editor
- CVE-2020-24902 Cross-site scripting in quixplorer project:quixplorer
- CVE-2020-24901 Cross-site scripting in krpano:krpano
- CVE-2020-24900 Cross-site scripting in krpano:krpano
- CVE-2020-2490 Command injection in QTS
- CVE-2020-24899 Command injection in nagios:nagios xi
- CVE-2020-24898 Server-side request forgery in stiltsoft:table filter and charts for confluence server
- CVE-2020-24897 Cross-site scripting in stiltsoft:table filter and charts for confluence server
- CVE-2020-24890 Null dereference in libraw:libraw
- CVE-2020-24889 Memory corruption in libraw:libraw
- CVE-2020-24881 Server-side request forgery in enhancesoft:osticket
- CVE-2020-24877 SQL injection in zzzcms:zzzphp
- CVE-2020-24876 Hardcoded credentials in pancakeapp:pancake
- CVE-2020-24872 Cross-site scripting in lepton-cms:leptoncms
- CVE-2020-24870 Memory corruption in libraw:libraw
- CVE-2020-24863 Memory corruption in freebsd:freebsd
- CVE-2020-24862 SQL injection in pharmacy medical store and sale point project:pharmacy medical store and sale point
- CVE-2020-24861 Cross-site scripting in get-simple:getsimple cms
- CVE-2020-24860 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2020-24857 Cross-site scripting in inex:ixp manager
- CVE-2020-24855 easywebpack-cli Path Traversal vulnerability
- CVE-2020-24849 Command injection in fruitywifi project:fruitywifi
- CVE-2020-24848 Misconfiguration in fruitywifi project:fruitywifi
- CVE-2020-24847 Cross-site request forgery in fruitywifi project:fruitywifi
- CVE-2020-24842 Cross-site scripting in sdgc:pnpscada
- CVE-2020-24841 SQL injection in sdg:pnpscada
- CVE-2020-24838 Integer overflow in issuer project:issuer
- CVE-2020-24837 Integer overflow in zcfees project:zcfees
- CVE-2020-24829 Memory corruption in gpac:gpac
- CVE-2020-24827 Memory corruption in libelfin project:libelfin
- CVE-2020-24826 Memory corruption in libelfin project:libelfin
- CVE-2020-24825 Memory corruption in libelfin project:libelfin
- CVE-2020-24824 Memory corruption in libelfin project:libelfin
- CVE-2020-24823 Memory corruption in libelfin project:libelfin
- CVE-2020-24822 Memory corruption in libelfin project:libelfin
- CVE-2020-24821 Memory corruption in libelfin project:libelfin
- CVE-2020-24815 Server-side request forgery in microstrategy:microstrategy
- CVE-2020-24807 File restriction bypass in socket.io-file
- CVE-2020-24804 Information disclosure in cms-dev:cms
- CVE-2020-24794 Cross-site scripting in kentico:xperience
- CVE-2020-24791 SQL injection in thedaylightstudio:fuel cms
- CVE-2020-24786 Auth bypass in zohocorp:manageengine ad360
- CVE-2020-24772 Security feature bypass in clash project:clash
- CVE-2020-24771 Missing authorization in nexusphp:nexusphp