Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 120 of 215.
- CVE-2020-24770 SQL injection in nexusphp:nexusphp
- CVE-2020-24769 SQL injection in nexusphp:nexusphp
- CVE-2020-24765 Information disclosure in mind:imind server
- CVE-2020-24755 Other in ui:unifi video
- CVE-2020-24753 Memory corruption in objective open cbor run-time project:objective open cbor run-time
- CVE-2020-24750 Unsafe Deserialization in jackson-databind
- CVE-2020-24743 Privilege escalation in zohocorp:manageengine applications manager
- CVE-2020-24742 Code injection in qt:qt
- CVE-2020-24740 Cross-site request forgery in pluck-cms:pluck
- CVE-2020-24739 Cross-site request forgery in idreamsoft:icms
- CVE-2020-24736 Memory corruption in ghost:sqlite3
- CVE-2020-24723 Cross-site scripting in phpgurukul:user registration \& login and user management system
- CVE-2020-24722 Weak cryptography in exposure notifications project:exposure notifications
- CVE-2020-24721 Information disclosure in apple:exposure notifications
- CVE-2020-24719 Information disclosure in couchbase:couchbase server
- CVE-2020-24718 Missing authorization in freebsd:freebsd
- CVE-2020-24717 Misconfiguration in openzfs:openzfs
- CVE-2020-24716 Misconfiguration in openzfs:openzfs
- CVE-2020-24715 Scalyr Agent 2 Missing SSL Certificate Validation
- CVE-2020-24714 Scalyr Agent Missing SSL Certificate Validation
- CVE-2020-24713 Auth bypass in getgophish:gophish
- CVE-2020-24712 Cross-site scripting in getgophish:gophish
- CVE-2020-24711 Denial of service in getgophish:gophish
- CVE-2020-24710 Gophish vulnerable to Server-Side Request Forgery
- CVE-2020-24709 Cross-site scripting in getgophish:gophish
- CVE-2020-24708 Cross-site scripting in getgophish:gophish
- CVE-2020-24707 Code injection in getgophish:gophish
- CVE-2020-24706 Cross-site scripting in wso2:api manager
- CVE-2020-24705 Information disclosure in wso2:api manager
- CVE-2020-24704 Cross-site scripting in wso2:api manager
- CVE-2020-24703 Information disclosure in wso2:api manager
- CVE-2020-24701 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2020-24700 Server-side request forgery in open-xchange:open-xchange appsuite
- CVE-2020-24699 Cross-site scripting in chamber dashboard business directory project:chamber dashboard business directory
- CVE-2020-24698 Memory corruption in powerdns:authoritative
- CVE-2020-24697 Denial of service in powerdns:authoritative
- CVE-2020-24696 Race condition in powerdns:authoritative
- CVE-2020-24693 Information disclosure in mitel:micontact center business
- CVE-2020-24692 Cross-site scripting in mitel:micontact center business
- CVE-2020-24686 AC500 V2 webserver denial of service vulnerability
- CVE-2020-24685 AC500 V2 unauthenticated crafter packet vulnerability
- CVE-2020-24683 Authentication Bypass in Symphony Plus
- CVE-2020-24682 Automation Studio and PVI Multiple unquoted service path vulnerabilities
- CVE-2020-24681 Automation Studio and PVI Multiple incorrect permission assignments for services
- CVE-2020-24680 Improper Credential Storage in Symphony Plus
- CVE-2020-24679 Denial of Service attack on Symphony Plus
- CVE-2020-24678 Potential Privilege Escalation in Symphony Plus
- CVE-2020-24677 Insecure Web Service in Symphony Plus
- CVE-2020-24676 Insecure Windows Services in Symphony Plus
- CVE-2020-24675 Weak Authentication in Symphony Plus
- CVE-2020-24674 Improper Authorization in Symphony Plus
- CVE-2020-24673 SQL Injection in Symphony Plus
- CVE-2020-24672 ABB Base Software for SoftControl Remote Code Execution vulnerability
- CVE-2020-24671 SQL injection in tracefinanacial:crestbridge
- CVE-2020-24670 Cross-site scripting in hitachi:vantara pentaho
- CVE-2020-24669 Cross-site scripting in hitachi:vantara pentaho
- CVE-2020-24668 Cross-site scripting in tracefinancial:crestbridge
- CVE-2020-24667 SQL injection in tracefinanacial:crestbridge
- CVE-2020-24666 Cross-site scripting in hitachi:vantara pentaho
- CVE-2020-24665 XML external entity in hitachi:vantara pentaho
- CVE-2020-24664 Cross-site scripting in hitachi:vantara pentaho
- CVE-2020-24663 Cross-site scripting in tracefinanacial:crestbridge
- CVE-2020-24662 Cross-site scripting in smartstream:transaction lifecycle management reconciliations-premium
- CVE-2020-24661 Security feature bypass in fedoraproject:fedora
- CVE-2020-24660 Lack of URL normalization may lead to authorization bypass when URL access rules are used
- CVE-2020-24659 Null dereference in canonical:ubuntu linux
- CVE-2020-24658 Security feature bypass in arm:arm compiler
- CVE-2020-24656 XML external entity in maltego:maltego
- CVE-2020-24655 Race condition in twilio:authy 2-factor authentication
- CVE-2020-24654 Path traversal in canonical:ubuntu linux
- CVE-2020-24653 Expo on iOS is insecure due incorrect security attribute application
- CVE-2020-24652 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-24651 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-24650 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-24649 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-24648 Deserialization in HPE Intelligent Management Center (iMC)
- CVE-2020-24647 Code injection in HPE Intelligent Management Center (iMC)
- CVE-2020-24646 Memory corruption in HPE Intelligent Management Center (iMC)
- CVE-2020-24641 Server-side request forgery in Aruba AirWave Glass Software
- CVE-2020-24640 Command injection in Aruba AirWave Glass Software
- CVE-2020-24639 Deserialization in Aruba AirWave Glass Software
- CVE-2020-24638 Command injection in Aruba AirWave Glass Software
- CVE-2020-24637 Security feature bypass in Aruba 7000 Series Mobility Controllers
- CVE-2020-24636 Command injection in Aruba Instant Access Points
- CVE-2020-24635 Command injection in Aruba Instant Access Points
- CVE-2020-24634 Command injection in Aruba 7000 Series Mobility Controllers
- CVE-2020-24633 Memory corruption in Aruba 7000 Series Mobility Controllers
- CVE-2020-24632 Command injection in Aruba Airwave Software
- CVE-2020-24631 Command injection in Aruba Airwave Software
- CVE-2020-24630 Privilege escalation in HPE Intelligent Management Center (iMC)
- CVE-2020-24629 Auth bypass in HPE Intelligent Management Center (iMC)
- CVE-2020-24628 Code injection in HPE KVM IP Console Switches
- CVE-2020-24627 Cross-site scripting in HPE KVM IP Console Switches
- CVE-2020-24626 Path traversal in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter
- CVE-2020-24625 Path traversal in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter
- CVE-2020-24624 Path traversal in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter
- CVE-2020-24623 SQL injection in HPE Universal API Framework for VMware ESXi (OVA) in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD)
- CVE-2020-24622 Information disclosure in sonatype:nexus
- CVE-2020-24621 Path traversal in openmrs:htmlformentry
- CVE-2020-24620 Weak cryptography in unisys:stealth